# iptables-save
# Generated by iptables-save v1.4.4 on Mon Nov 22 16:06:31 2010
*filter
:INPUT ACCEPT [1324:790913]
:FORWARD ACCEPT [3389:341110]
:OUTPUT ACCEPT [1656:273098]
-A FORWARD -m state --state RELATED,ESTABLISHED -m physdev --physdev-out vif2.0 -j ACCEPT
-A FORWARD -m physdev --physdev-in vif2.0 -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -m physdev --physdev-out vif1.0 -j ACCEPT
-A FORWARD -m physdev --physdev-in vif1.0 -j ACCEPT
COMMIT
# Completed on Mon Nov 22 16:06:31 2010
dom1:
root@xen-hypervisor:~# iptables-save
# Generated by iptables-save v1.4.4 on Mon Nov 22 18:03:46 2010
*filter
:INPUT ACCEPT [4002:941999]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [198:10662]
COMMIT
# Completed on Mon Nov 22 18:03:46 2010
dom3:
root@xen-hypervisor:~# iptables-save
# Generated by iptables-save v1.4.4 on Mon Nov 22 18:05:16 2010
*filter
:INPUT ACCEPT [504:496131]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [217:11648]
COMMIT
# Completed on Mon Nov 22 18:05:16 2010
Thank you!
--
David
2010/11/22 Digimer
<linux@xxxxxxxxxxx>
On 11/22/2010 12:52 PM, David Cemin wrote:
Yes, I´ve done that:
root@xen-hypervisor:~# ifconfig
eth0 Link encap:Ethernet HWaddr 00:16:3e:63:29:ab
But it appears that the link to dom1 inside dom0 is wrong:
vif1.0 Link encap:Ethernet HWaddr fe:ff:ff:ff:ff:ff
inet6 addr: fe80::fcff:ffff:feff:ffff/64 Scope:Link
Am I right? If yes, it is configurable through xend-config.sxp ?
Thank you!
Sorry, vifX.Y devices are 'fe:ff:ff:ff:ff:ff'. So long as the eth0 inside each domU is unique, you are ok.
Do you have any firewalls running? What does 'iptables-save' show on dom[013]?
--
David Cemin
mobile: +55 51 93523097
home: +55 51 32763785
email:
davidcemin@xxxxxxxxx