Use NAT when a VMware virtual machine mainly needs an internet connection; use Bridged when it needs its own place on the physical network. Host-only creates a private network with the host and other participating virtual machines. Choose around the connections you actually need.
Compare the main network modes
| Mode | How it works | Important limit |
|---|---|---|
| NAT | The guest uses a private virtual network and shares the host’s outgoing connection. | Unsolicited incoming LAN connections normally need explicit forwarding. |
| Bridged | The guest joins the physical network through a host adapter. | It needs an address and permission on that network. |
| Host-only | The host and participating guests communicate on a private virtual network. | No external connection is supplied by that mode alone. |
| Custom | The guest uses the selected VMnet and its configured mode. | The name alone does not tell you whether it uses NAT or bridging. |
| LAN segment | Selected guests share a separate virtual segment. | Plan addressing; do not assume Workstation supplies DHCP there. |
Broadcom documents the hosted networking types and Virtual Network Editor. Menu labels vary with Workstation version and host platform.
Set the virtual machine’s network adapter
- Save work in the guest and open the virtual machine’s settings.
- Select its network adapter and choose the required mode.
- Check that the adapter is connected and, if wanted, connects when the guest starts.
- For a bridged setup, check which physical adapter is selected, especially when the host has both Wi-Fi and Ethernet.
- In the guest, check the assigned address, default gateway and DNS settings before testing a website or service.
Start with one virtual adapter. Multiple adapters can make routing harder to interpret. If you need to identify the Windows host’s adapters, see our network-adapter guide.
If the guest cannot connect
- Confirm the host itself has the expected connection.
- Check whether the guest received an address from the intended DHCP service.
- Distinguish reaching the gateway from resolving a website name. A DNS failure is not the same as a disconnected adapter.
- For incoming connections, check the guest service, guest firewall and any required NAT forwarding.
- On a managed network, ask whether bridged guests are permitted.
NAT is not a complete security boundary, and host-only does not make an unknown guest harmless. Shared folders, clipboard integration and other virtual adapters can still connect it to the host. Keep normal security controls enabled instead of turning off every firewall to make a test pass.
Images from the original guide
These illustrations were published with the earlier article. Software screens and products shown are historical examples, not current compatibility guidance.
Frequently asked questions
Which mode should I try for ordinary internet access?
NAT is often the simplest starting point. Confirm it fits your host and guest configuration.
Why does Bridged not get an address?
Check the selected physical adapter, the network’s DHCP service and any access policy for extra devices.
Does Host-only provide internet access?
Not by itself. Any additional routing or internet sharing is a separate configuration.
What is VMnet8?
It is commonly used for NAT in a default Workstation setup, but inspect the actual configuration rather than relying only on the number.