WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Xenbr0

To: "Thomas Harold" <tgh@xxxxxxxxxxxx>
Subject: Re: [Xen-users] Xenbr0
From: "Eric Benton" <benton71@xxxxxxxxx>
Date: Tue, 28 Nov 2006 16:14:40 +0200
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Tue, 28 Nov 2006 06:14:51 -0800
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=tTvUUev9C+EY4c4eg8WINE0A5cE2wny+vN4ddzBxLlBTigF0Wi8YtJbWmojP1QUN1LwiOmxGF7B6lpEZ5iwEVT4BsToIQsSU8OomOlAEckz5MQIHdKL1eFLJyxYW2weqIG2wuUVhuDq/Lkxth0rq75bVrksqhboE2ZYIoGoCjeQ=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <456C43A7.3060304@xxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <29545330611272333p4d0478bbg533eaff638c5f631@xxxxxxxxxxxxxx> <456C43A7.3060304@xxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Ok,
Thanks...

On 11/28/06, Thomas Harold <tgh@xxxxxxxxxxxx> wrote:
Eric Benton wrote:
> Hi List,
>
> Is it possible to start a DomU or HVM with the same IP as Dom0?
> How can I achieve this?

The best way is with 2 ethernet interfaces.  One for (semi) exclusive
use by the firewall domain (either running in Dom0 or in a DomU) and the
2nd ethernet interface used by all of the DomUs as the "internal" side
and connected to your LAN segment.  The firewall domain then does the
NAT duties to move traffic between the two ethernet interfaces.

Tom Eastep over at Shorewall does this one his systems:

http://www.shorewall.net/XenMyWay.html
- Firewall is in a DomU

http://www.shorewall.net/XenMyWay-Routed.html
- Firewall is in the Dom0

(Just toss a cheap linux-compatible NIC in a PCI slot for the external
interface if needed.)


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>