Internet access from Virtual Lab

Challenge

You need to be able to access the Internet from the isolated Virtual Lab.

Solution

NOTE: The function documented in this KB enables the virtual lab proxy appliance to act as an internet proxy. This proxy function only passes web browser traffic. This will not allow for any other type of traffic (e.g. ICMP, FTP, or SSH) to leave the isolated environment.

──────────────────────────────────────────────────────────
Veeam Backup & Replication 7.x, 8.x, 9.x
──────────────────────────────────────────────────────────
 
Within the configuration of the Virtual Lab, on the Proxy tab, select the Allow proxy appliance to act as internet proxy for virtual machines in this lab check box. In the Port field, specify a port for HTTP traffic. By default, port 8080 is used. In the Production proxy field, you can optionally specify an IP address or a fully qualified domain name of an Internet-facing proxy server that VMs must use to access the Internet.
 
After a VM has been started using this Virtual Lab you must adjust the proxy settings to enable internet access. To do this, open Internet Options > Connections > LAN Settings > Proxy server and specify the IP address of the proxy appliance on the isolated network and port number.





──────────────────────────────────────────────────────────
Veeam Backup & Replication 5.x and 6.x
──────────────────────────────────────────────────────────

1. Open the registry editor and create the following key:
   HKLM\SOFTWARE\VeeaM\Veeam Backup and Replication\SureBackup
   
   The following features can be enabled:
   1. Enable Internet access from inside lab.
      Create a new DWORD in the above key (1=enabled,0=disabled):
      
      v5: VLabProxyEnable
      v6: VLabProxyEnabled
       
   2. Customize the proxy port
      Create the following DWORD.
      If the DWORD is not created port 8080 is used.
      Note: Remember to change the option to decimal before entering a value.
      
      VLabProxyHTTPPort
       
   3. Set upstream proxy server.
      For use if Virtual Lab production interface cannot access internet.
      If this String does not exist, the proxy appliance must have direct internet access from its production network interface.
      Create the following String.
      
      VLabProxyServer
      
      Note: Authentication on upstream proxy (username/password) is NOT supported.
       
2. Restart Veeam Backup Service.
3. Create a NEW virtual lab.

Remember to adjust proxy settings in the Internet Options on every sandboxed VM. To do that, open Internet Options > Connections > LAN Settings > Proxy server, and specify the proxy appliance IP address on the isolated network and the port number.