Understanding VMware Network Adapters | Bridged, NAT, Host-Only, and Custom Networks with Real-World Examples

VMware offers multiple networking modes, each serving different purposes depending on how you want your virtual machines (VMs) to communicate with each other, the host system, and external networks. The primary VMware network adapters include Bridged, NAT, Host-Only, and Custom Networks (VMnet0-VMnet9). Bridged Mode connects the VM to the physical network, giving it an IP address like any other device on the network. NAT Mode allows the VM to access the internet through the host’s network while remaining hidden from other devices. Host-Only Mode creates a private network where VMs can only communicate with the host and other VMs but not the internet. Custom Networks enable advanced configurations, allowing users to create isolated labs for testing purposes. Understanding these modes is crucial for penetration testers, network engineers, and cybersecurity researchers working in VMware environments. This blog explains how each mode works, their real-time use cases, and how

Understanding VMware Network Adapters |  Bridged, NAT, Host-Only, and Custom Networks with Real-World Examples

Table of Contents

Introduction

When setting up virtual machines (VMs) in VMware, choosing the right network adapter is crucial. Your choice affects how your VMs communicate with each other, the internet, and your host system (Windows machine). VMware provides several network options, including Bridged, NAT, Host-Only, and Custom Networks.

In this blog, we will break down each network mode, explain how IP addressing works, and provide real-world scenarios where you might use them.

What is VMware Networking?

VMware allows you to create virtual machines (VMs) that run inside your physical computer. These VMs need a network connection for internet access, communication between VMs, or connection with your host system (Windows or Linux).

VMware provides multiple networking modes, and each has a different purpose. Choosing the right mode depends on:

  • Do you need internet access?

  • Do you want VMs to communicate with each other?

  • Do you need to isolate VMs for security testing?

Understanding VMware Network Modes

Below is a table summarizing the key differences between VMware network adapters:

Network Mode How It Works IP Addressing Use Case
Bridged VM connects to the real network like another physical device. Same network as the host. When you need the VM to act as a real device on the network.
NAT VM uses host’s internet connection through Network Address Translation. Different private IP from host. When you need internet access but don’t want the VM exposed.
Host-Only VM is isolated and can only communicate with the host and other VMs. Private network (not visible externally). When you need an internal test network.
Custom (VMnet0-VMnet9) User-defined networks for advanced scenarios. Depends on configuration. When you need multiple VMs in a lab setup.

Bridged Mode: Direct Network Access

How It Works

  • The VM gets an IP from the same network as the host system (your physical machine).

  • The VM acts like another real device on the network.

IP Addressing Example

Device IP Address
Your Real Windows Machine 192.168.1.100
Your Kali VM (Bridged Mode) 192.168.1.101
Your Router (Gateway) 192.168.1.1

Real-World Example

Let’s say you are a penetration tester using Kali Linux in VMware. If you need to scan all devices on the same Wi-Fi network, you can use Bridged Mode:

nmap -sn 192.168.1.0/24

This command will detect all devices on the network.

When to Use Bridged Mode?

  • When your VM needs to communicate with other devices on the physical network.

  • When performing penetration testing on a real network.

NAT Mode: Secure Internet Access

How It Works

  • The VM shares the host’s internet connection.

  • It has a private IP address (not directly accessible from other network devices).

IP Addressing Example

Device IP Address
Your Real Windows Machine 192.168.1.100
Your Kali VM (NAT Mode) 192.168.50.2 (VMware Private Network)
VMware Gateway 192.168.50.1

Real-World Example

You want to update Kali Linux but keep it hidden from the rest of the network:

sudo apt update && sudo apt upgrade -y

When to Use NAT Mode?

  • When your VM needs internet access but should remain hidden from other network devices.

  • When you want to browse securely using the host’s network.

Host-Only Mode: Isolated Environment

How It Works

  • The VM can only communicate with the host and other VMs in the same Host-Only network.

  • No internet access in this mode.

IP Addressing Example

Device IP Address
Your Kali VM 192.168.100.2
Your Windows VM 192.168.100.3
Host Machine 192.168.100.1

Real-World Example

You want to test Metasploit exploits on a Windows VM without exposing it to the internet:

  1. Set up Kali Linux in Host-Only Mode.

  2. Set up Windows VM in Host-Only Mode.

  3. Run a Metasploit attack in Kali:

    use exploit/windows/smb/ms17_010_eternalblue
    

When to Use Host-Only Mode?

  • For isolated penetration testing labs.

  • When you need a safe hacking environment.

Custom Networks: Advanced Configurations

How It Works

  • You can define your own virtual networks using VMnet0-VMnet9.

  • Useful when working with complex lab setups.

Real-World Example

  • You set up:

    • Metasploit on VMnet1

    • Kali on VMnet1

    • Windows on VMnet1

  • This keeps them in a separate lab environment while you test attacks.

How to Check and Configure Network Settings in VMware

Checking IP Address in a VM

On Kali Linux:

ifconfig  # or ip a

On Windows VM:

ipconfig

Configuring the Network Mode

  1. Open VMware Workstation.

  2. Go to VM > Settings > Network Adapter.

  3. Choose Bridged, NAT, Host-Only, or Custom.

  4. Click OK and restart the VM.

Final Thoughts

  • Use Bridged Mode if you want the VM to behave like a real device on the network.

  • Use NAT Mode if you want secure internet access.

  • Use Host-Only Mode for isolated environments.

  • Use Custom Networks for advanced setups.

FAQs 

What is the purpose of VMware network adapters?

VMware network adapters allow virtual machines (VMs) to communicate with other VMs, the host system, or external networks based on the selected network mode.

What is Bridged Mode in VMware?

Bridged mode allows the VM to act as a physical device on the network, getting an IP from the same subnet as the host.

When should I use Bridged Mode?

Use Bridged Mode when you want your VM to communicate with other network devices like a real system. This is useful in penetration testing and network simulations.

What IP address does a VM get in Bridged Mode?

The VM gets an IP from the same range as the host system, assigned by the router or DHCP server.

Can a VM in Bridged Mode access the internet?

Yes, since the VM is connected directly to the real network, it can access the internet like any physical device.

What is NAT Mode in VMware?

NAT (Network Address Translation) allows a VM to share the host’s internet connection, assigning the VM a private IP.

How does NAT Mode affect the VM’s IP address?

The VM gets an IP from VMware’s internal DHCP server (e.g., 192.168.50.x), different from the host’s real network.

When should I use NAT Mode?

Use NAT Mode when you need internet access for a VM but don’t want it to be directly accessible from other devices.

Can other devices on the network see a VM in NAT Mode?

No, the VM remains hidden because it shares the host’s IP externally.

What is Host-Only Mode in VMware?

Host-Only Mode creates an isolated network where VMs can communicate with each other and the host but not the internet.

Why use Host-Only Mode?

It is used for safe penetration testing, malware analysis, or creating a private lab environment.

Can a VM in Host-Only Mode access the internet?

No, because Host-Only Mode does not route traffic to the external network.

What is a Custom Network in VMware?

Custom Networks (VMnet0-VMnet9) allow users to define their own networking rules, useful for complex lab setups.

How do I set up a Custom Network?

You can configure it in VMware Workstation > Edit > Virtual Network Editor, where you can assign VMs to specific networks.

Which network mode is best for penetration testing?

  • Bridged Mode for attacking real network devices.

  • Host-Only Mode for an isolated testing environment.

How do I check a VM’s IP address?

  • On Linux: Run ifconfig or ip a

  • On Windows: Run ipconfig

Why does my VM not get an IP in Bridged Mode?

This may happen due to DHCP server issues, firewall restrictions, or incorrect adapter settings in VMware.

Can I assign a static IP to a VM?

Yes, you can manually configure a static IP in your VM’s network settings instead of using DHCP.

Can multiple VMs in NAT Mode communicate with each other?

Yes, VMs in NAT Mode can communicate with each other but not with external network devices.

Can I use multiple network adapters on the same VM?

Yes, VMware allows you to attach multiple network adapters (Bridged, NAT, Host-Only, etc.) to a single VM.

What is VMnet0 in VMware?

VMnet0 is the default Bridged Mode network in VMware.

What is VMnet1 in VMware?

VMnet1 is the default Host-Only network in VMware.

What is VMnet8 in VMware?

VMnet8 is the default NAT network in VMware.

How can I share files between the host and VM?

Use Shared Folders or enable Bridged/Host-Only networking for direct file sharing.

Can I connect VMware VMs to Wi-Fi?

Yes, using Bridged Mode, your VM can connect to a Wi-Fi network like a physical device.

How do I enable internet access for a VM?

Ensure the VM is in Bridged or NAT Mode, and check if the VMware DHCP service is running.

How do I isolate a VM from the internet?

Use Host-Only Mode to prevent internet access while allowing VM-to-host communication.

What is the difference between NAT and Host-Only Mode?

  • NAT Mode allows internet access via the host.

  • Host-Only Mode does not allow internet access and keeps the VM isolated.

Can I connect VMware VMs to a real network switch?

Yes, in Bridged Mode, the VM will act as a real machine on the network and can connect to physical switches.

Join Our Upcoming Class! Click Here to Join
Join Our Upcoming Class! Click Here to Join