WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Private vlans for guests

To: echo@xxxxxxxxxxxx
Subject: Re: [Xen-users] Private vlans for guests
From: Ferenc Wagner <wferi@xxxxxxx>
Date: Fri, 19 Sep 2008 10:09:59 +0200
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Fri, 19 Sep 2008 01:10:41 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <1221807451.5365.603.camel@xxxxxxxxxxxxxxxxxxxxx> (Tim Post's message of "Fri, 19 Sep 2008 14:57:31 +0800")
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <1221807451.5365.603.camel@xxxxxxxxxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Gnus/5.110006 (No Gnus v0.6) Emacs/21.4 (gnu/linux)
Tim Post <echo@xxxxxxxxxxxx> writes:

> I have 6 xen-0 hosts that have two nics each. On all hosts, eth0 is
> enslaved to the primary bridge and is connected to the public switch.
>
> eth1 is enslaved to a private bridge and is connected to a private
> switch.
>
> What I hope to accomplish is providing every dom-u with two network
> interfaces, one public, one private. On the farm, there are 6 users,
> each one has about 12 guests running.
>
> What I would like to do is assign user "sam" a private /24, say
> 192.168.2.0/24 to connect his guests via LAN. I'd like to assign "sue"
> 192.168.3.0/24.
>
> I don't want sam to be able to reach sue's network, or sue to reach
> sam's.

Why don't you create separate bridges for each user, and connect them
amongst the dom0-s by separate vlans?

> Somehow I was thinking I could accomplish this with ebtables,

Yes you can, if you prefer, but the above is easier IMO.
-- 
Regards,
Feri.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>