|  |  | 
  
    |  |  | 
 
  |   |  | 
  
    |  |  | 
  
    |  |  | 
  
    |   xen-users
Re: [Xen-users] DHCP problem in privleged domU from ISP 
| Now Hear This. From this day forth any whom defy Patrick Wolfe will
squander miserably at his feet for forgiveness! Oh great Patrick Please
forgive my infidelity. I should never have doubted you! 
 ok seriously, you were right, a combination of "ifconfig down hw ether
00:01:29:xx:xx:xx; ifconfig eth0 up" and switching the rj-45 cables in
the back of my machine got a dhcp address from my isp in no time.
 
 
 On 3/13/06, Patrick Wolfe <pwolfe@xxxxxxxxxxxxxx
> wrote:I use cable modem too, and have to spoof the mac address of my old sony
laptop, which was the first machine I used on it, three years ago.
 
 A cable modem is a passive bridge device.  It's your pc's mac address
 that their DHCP server sees, not the cable modems.  Trust me on this.
 
 On Mon, 2006-03-13 at 15:20 -0500, Frank DiRocco wrote:
 > if i was not using a cable modem I would agree with you, but the cable
 > modems mac address is what the isp uses. This im sure of because i
 > changed the nic on the server im using now to do my routing and I
 > didn't have to change anything. I'm going to set up a dhcp server
 > localy and see if I get an address, after all its always some stupid
 > configuration misspelling >: - P --- Thanks Patrick!
 >
 > oh and in the domu ifconfig shows the HW mac as 00:a0:cc:xx:xx:xx
 > where as the real HW mac is 00:01:29:xx:xx:xx and this is automatic
 > from xen I have not set any mac addresses.
 >
 > On 3/13/06, Patrick Wolfe <
pwolfe@xxxxxxxxxxxxxx> wrote:
 >         I'll bet your ISP will only serve IP addresses to the MAC
 >         address that
 >         first used their services.  The easy solution is clone your
 >         current
 >         internet interface's MAC address.  Find out the MAC address of
 >         your
 >         current debian box's internet interface, and configure that
 >         exact same
 >         MAC address on your domU firewall's internet
 >         interface.  Another
 >         solution is to call the ISP and ask them to change which MAC
 >         you are
 >         allowed to use.  But if you switch back, you have to call them
 >         again.
 >
 >         As a side note, Xen has it's own assigned manufacturer's MAC
 >         address
 >         range - 00:16:3e:xx:xx:xx, so instead of your current mac
 >         address
 >         assignments aa:00:00:xx:xx:xx, you might want to consider
 >         using the Xen
 >         assigned range.  It probably won't break anything to use the
 >         address
 >         range you are using now, but somewhere down the road, you or
 >         someone
 >         else will be tracking down a problem, using a protocol
 >         analyzer and not
 >         remember that you made up that MAC address range, and won't
 >         know what
 >         that device is.  If you use the standard range, the protocol
 >         analyzer
 >         should be able to identify the manufacturer as Xen.
 >
 >         Good Luck!
 >
 >         On Mon, 2006-03-13 at 14:23 -0500, Frank DiRocco wrote:
 >         > Hello again! I've got my vmware privleged domu running great
 >         and a
 >         > shorewall based firewall doing all the routing perfectly. so
 >         i decided
 >         > to use the procedure on my production server (mirrored so no
 >         big deal
 >         > if it goes down from time to time). the setup is exactly the
 >         same as
 >         > in vmware:MAC
 >        
>            ____________________________________
 >        
>            |    
___________________________            |
 >        
>            |    
|
 >         > |           |
 >        
>
eth0----+----|        msxen0
from option-c.com
 >         > |----------+------eth1 LAN
 >        
>            |    
|          domu
shorewall firewall
 >         |
 >         > |
 >        
>            |    
|___eth2______________eth3___
|           |
 >        
>            |              |                                  |
 >         > |
 >        
>            |              |                                  |_DMZ
 >         > |
 >        
>            |              |
 >         > |  yes this is broken on purpose so dmz access cannot reach
 >         dom0
 >        
>            |              |
 >         > |
 >        
>            |_______|_________________|__________ |
 >        
>            |
 >         > |
 >        
>            |            
dom 0 w/ dummy
 >        
module                    |
 >        
>            |    physdev_dom0_hide=(my
nic interfaces)      |
 >         MAC
 >        
>            |___________________________________ | (sorry my
 >         asci
 >         > stinks)
 >         >
 >         > as you can hopfully see dom0 only has two interfaces, dummy0
 >         and
 >         > dummy1. the firewall domu has 4 eth0 eth1 eth2 eth3. The
 >         PROBLEM is i
 >         > can not get a dhcp address from my ISP, it eventually times
 >         out.
 >         > Although, the exact same setup on a virtual machine inside
 >         my lan,
 >         > eth0 recives a dhcp address (localy) with no problems.
 >         >
 >         > xm list firewall (on both real server and test-server)public
 >         > (vif (idx0) (vif0) (mac:aa:00:00:09:3e:fc) (vifname vif 1.0)
 >         (bridge
 >         > br0) (evtchn 14 4) (index 0))
 >         > (vif (idx0) (vif1) (mac:aa:00:00:09:3e:fc) (vifname vif 
1.1)
 >         (bridge
 >         > br0) (evtchn 15 5) (index 1))
 >         > (vif (idx0) (vif2) (mac:aa:00:00:09:3e:fc) (vifname vif 1.2)
 >         (evtchn
 >         > 16 6) (index 2))
 >         > (vif (idx0) (vif3) (mac:aa:00:00:09:3e:fc) (vifname vif 1.3)
 >         (evtchn
 >         > 17 7) (index 3))
 >         >
 >         > Is there anything I have to do the get the dhcp address from
 >         the isp
 >         > as oppesed to getting from a debian server on my lan.
 >         > All comments questions and whatnot are welcomed and
 >         appriciated.
 >         >
 >         > --
 >         > Thank you,
 >         > Frank  Di Rocco
 >         >
 >         > "Does an optimistic person look at a hard drive as half-full
 >         or
 >         > half-empty?" -ofanged1-at-gmail.com
 >         > _______________________________________________
 >         > Xen-users mailing list
 >         > 
Xen-users@xxxxxxxxxxxxxxxxxxx
 >         > http://lists.xensource.com/xen-users
 >         --
 >         Patrick Wolfe  (
pwolfe@xxxxxxxxxxxxxx)
 >
 >
 >
 >         -----BEGIN PGP SIGNATURE-----
 >         Version: GnuPG v1.4.1 (GNU/Linux)
 >
 >         iD8DBQBEFcvFIibbc6631koRAqr8AKCVs
 >         +KvEwD2npRB7iHVgy3EQHgnHQCgiYtU
 >         mQnueDO1huydaS+8EAABmRE=
 >         =urfO
 >         -----END PGP SIGNATURE-----
 >
 >
 >
 >
 >
 > --
 > Thank you,
 > Frank  Di Rocco
 >
 > "Does an optimistic person look at a hard drive as half-full or
 > half-empty?" -ofanged1-at-gmail.com
 --
 Patrick Wolfe  (
pwolfe@xxxxxxxxxxxxxx)
 
 
 
 -----BEGIN PGP SIGNATURE-----
 Version: GnuPG v1.4.1 (GNU/Linux)
 
 iD8DBQBEFdmAIibbc6631koRAjwNAJ9d3dBHRGLxsR4Ohu3btJO6MQbqRwCfdNKA
 8TNhmUeQq2oPtFOIS47lG/U=
 =+owQ
 -----END PGP SIGNATURE-----
 
 
 
 
 
 --
 Thank you,
 Frank  Di Rocco
 
 "Does an optimistic person look at a hard drive as half-full or half-empty?" -
ofanged1-at-gmail.com
 _______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users | 
 |  | 
  
    |  |  |