This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


Re: [Xen-users] vif configuration

To: Dennis <devel@xxxxxxxxxxxxxxx>
Subject: Re: [Xen-users] vif configuration
From: Marcus Brown <marcusbrutus@xxxxxxxxxxxxxxxx>
Date: Sun, 13 Nov 2005 01:27:41 +1100
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Sat, 12 Nov 2005 13:24:54 +0000
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <4373BCFF.3040806@xxxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <4373BCFF.3040806@xxxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Debian Thunderbird 1.0.7 (X11/20051017)
Hi Dennis,

Dennis wrote:
> I have a host with two network cards.  One card (eth0) connects to a
> switch.  The switch is connected to a firewall which is the gateway for
> the network.
> I'd like to set up a few domU machines and have them be on their own
> network.  The domU machines would be able to talk on their own network
> but preferably not to the real physical network (and other machines on
> it).  It is important that the firewall be able to give outside
> addresses to the virtual machines though. 
> I could for instance, hook the 2nd netword card directly to the firewall
> and have the firewall deny traffic between the two networks.
> I'm at a bit of a loss though, as my networking knowledge isn't the
> greatest.  I'm not sure if I should use vif-bridge, vif-route, vif-nat. 
> Not sure if I can do this on the primary nic or if I need both... 
> Any suggestions?

Perhaps you could look at this thread:

My latest idealistic, theoretical (partly implemented) diagram is here:


Xen-users mailing list

<Prev in Thread] Current Thread [Next in Thread>