Nested hyper-v guest network connectivity issue

Question

Nested hyper-v guest network connectivity issue

Jiya Raha 60

Plugged in the guest vms nested inside the inner hyper-v host and the network connection was not working to the physical network how can i enable mac address spoofing on the outer virtual network adapter to allow the nested vms to access the network ?

0 comments

2 answers

Your answer

Answer 1

To allow nested VMs to reach the physical network through the outer Hyper-V VM, enable MAC address spoofing on the outer VM’s network adapter.

Shut down the outer VM if needed.
On the physical host, open PowerShell.
Run:

Get-VMNetworkAdapter -VMName <VMName> | Set-VMNetworkAdapter -MacAddressSpoofing On

Replace <VMName> with the name of the outer VM that is hosting the inner Hyper-V guests.

Why this is needed:

Nested VM traffic passes through two virtual switches.
Hyper-V requires MAC address spoofing on the first-level VM adapter so packets from the nested guests can be routed correctly.

If connectivity still fails after enabling spoofing, check these items:

The nested VM is connected to an External virtual switch, not Internal or Private.
The outer VM is using the correct external network adapter.
Windows Firewall or security software is not blocking traffic.
If MAC spoofing cannot be used, configure NAT instead.

If NAT is required in the outer VM, the documented setup is:

New-VMSwitch -Name VmNAT -SwitchType Internal
New-NetNat –Name LocalNAT –InternalIPInterfaceAddressPrefix “192.168.100.0/24”
Get-NetAdapter "vEthernet (VmNat)" | New-NetIPAddress -IPAddress 192.168.100.1 -AddressFamily IPv4 -PrefixLength 24

Then assign each nested VM an IP in that subnet and use 192.168.100.1 as the gateway.

References:

Answer 2

Dear Jiya Raha,

In a nested Hyper‑V setup, the inner guest VMs cannot reach the physical network unless the outer VM’s virtual NIC allows their MAC addresses to pass through. The way to achieve this is by enabling MAC address spoofing on the outer VM’s virtual network adapter. You can do this directly in PowerShell from the physical host that runs the outer VM. The command is:

powershell

Set-VMNetworkAdapter -VMName "<OuterVMName>" -Name "<AdapterName>" -MacAddressSpoofing On

Replace <OuterVMName> with the name of the VM that hosts your inner Hyper‑V environment, and <AdapterName> with the name of the virtual NIC attached to it. Once spoofing is enabled, the inner guest VMs will be able to send and receive traffic using their own MAC addresses through the outer VM’s adapter, restoring full network connectivity.

If my answer is useful for you, please hit Accept the answer to support me.

Thank you,

HL.