How to Manage Virtual Networks in ESXi Server

Once you manage virtual networks in ESXi with confidence, connecting VMs to the right networks becomes routine instead of trial and error. For example, most home labs need only one vSwitch and two port groups.

Manage virtual networks in ESXi with vSwitches and port groups

ESXi’s virtual networking connects virtual machines to each other and to the physical network. Understanding it is essential: almost every lab exercise — domain controllers, clusters, routers — depends on putting the right VMs on the right network.

VSWITCHPORT GROUPSENTERPRISE LABtimer 30 MIN LAB
NH
Nurul Huda AUTHORInfrastructure & Cloud Architect · Verified 2026

print Print Lab

● VALID ON THE CONFIG BELOW

dns LAB TOPOLOGY & PREREQUISITES

# example values used while writing and testing this guide

VSWITCH SPECS

vSwitchvSwitch0
Uplinksvmnic0, vmnic1
MTU1500 (9000 lab)

PORT GROUPS

Management Networkvmk0
VM Networkguests
vMotionkernel, VLAN 20

NIC POLICY

Teamingoriginating port ID
Failoveractive + standby

01constructionThe Three Building Blocks

  • Standard Switch (vSwitch): a software switch inside the host, connected to physical NICs through uplinks
  • Port group: a named network on the switch (a VLAN), that VMs attach to — for example VM Network or Lab-DMZ
  • VMkernel adapter: a special port used by the host itself for management, vMotion, iSCSI or vSphere traffic

02downloadManage Virtual Networks: Creating a Port Group

In the ESXi Host Client, open Networking → Port groups and add one: give it a name, pick the vSwitch it lives on, set the VLAN ID (0 for no tagging) and note which uplinks carry it. Attach VMs by editing the machine’s network adapter and choosing the port group. Once you manage virtual networks in ESXi with port groups, VLANs and teaming become routine.

03usbManaging the Management Network

The host’s own IP settings live under Networking → VMkernel adapters. Editing the management adapter lets you change the IP, gateway and DNS. If you lock yourself out with a bad change, use the DCUI on the console (Configure Management Network) to repair it.

04terminalTypical Lab Exercises

If a VM has no connectivity, check in order: the port group assignment, the vSwitch uplink status, the physical switch port, and firewall inside the guest OS.

▶ COMPANION LAB WALKTHROUGH

Watch: How to Configure Networks in ESXi Server

Because some steps are easier to copy from video, this companion walkthrough mirrors the lab above. Also, the chapter pills follow the same order as the steps.

01 The Three Building Blocks02 Creating a Port Group03 Managing the Management Network04 Typical Lab Exercises

Q&AquizFrequently Asked Questions About Managing Virtual Networks in ESXi

What is the difference between a vSwitch and a port group?

The vSwitch is the virtual switch itself, while a port group is a named network on it. Think of the switch as the hardware and the port group as the wall socket you plug a VM into.

Why does a VMkernel adapter matter?

Because the host itself uses VMkernel adapters for management, vMotion and iSCSI. In contrast, VMs attach to ordinary port groups.

How do I isolate a lab network?

Create a port group with no active uplink, or a private port group with a VLAN ID nothing else uses. Consequently, only VMs on that port group can talk to each other.

Where does VLAN tagging happen?

Set the VLAN ID on the port group, and configure the physical switch to expect tagged traffic. If both sides disagree, the VM loses connectivity.

EXTopen_in_newExternal Resources

These official guides go deeper on managing virtual networks in ESXi.

Related Content

▶ UP NEXT IN THE NETWORKING TRACK

Move VMs Between Networks

Port groups are in place, so the next lab moves VMs between them. Then re-pointing NICs becomes routine.

rocket_launch Launch Next Lab