Blog Servers
Servers

How to Restrict Access to the ESXi Web Panel by IP

09.01.2025 Netbudur
How to Restrict Access to the ESXi Web Panel by IP
Netbudur Blog Infrastructure, hosting and server guides

How to Restrict Access to the ESXi Web Panel by IP

VMware ESXi is an effective platform that allows you to manage virtualization infrastructure securely. However, it is important to take additional measures on access to the web panel to improve safety. In this article, we will examine steps of limiting access to ESXi web panel with certain IP addresses.

What is the IP Limit and Why Is It Necessary?

The IP limit is a security measure used to block unauthorized access to the ESXi web interface by allowing requests from only certain IP addresses. This is:

  • Unauthorised access.

  • Potential attacks are blocked.

  • Server security increases.

IP Limit Steps to ESXi Web Panel

1. Activate SSH Access

Access to your ESXi server to be able to set IP limit is necessary. To activate SSH:

  1. Login to ESXi web panel.

  2. Host > Manage > Services Go to the section.

  3. TSM-SSH Find the service and click “Start” option.

2. Connect with SSH to ESXi Server

Connect to your server with your SSH client (Putty or similar software). Log in by entering your username and password.

3. Configure IP Limit

After connecting with SSH, you will need to change the firewall settings of ESXi.

  1. Find Firewall Setting File:

    cd /etc/vmware/firewall

  2. Backup Firewall Rule File: By taking a copy of the existing file, you can return it in case of errors:

    cp esxi.xml esxi_backup.xml

  3. Hide File: Open the file using a text editor (nano or vi):

    nano esxi.xml

  4. Add IP Rule: Add the IP addresses you want to allow ESXi web panel in the following format:

    
    192.168.1.100
    192.168.1.101

    Here, use a separate tag for each IP address to add multiple IP addresses.

  5. Save and Remove File: Save and close the file.

4. Restore Firewall Settings

Restart firewall service to activate changes made:

esxcli network firewall refresh

5. Test Settings

Check whether or not access to the web panel from specified IP addresses.

 

Put IP limit to the ESXi web panel is one of the effective ways to improve your server security. By following these steps, you can give access permission to a limited IP address group and avoid unauthorized access. Remember, it is important to check and update security settings regularly.