This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-users] DomU privleged network access - Firewall

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-users] DomU privleged network access - Firewall
From: "Frank DiRocco" <ofanged1@xxxxxxxxx>
Date: Fri, 10 Mar 2006 10:29:53 -0500
Delivery-date: Fri, 10 Mar 2006 15:30:55 +0000
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type; b=Z/qppd3KcJ9ylOeeqIIHx9zHvA/aDnw4lSRpm3SgapHeQugck8NvmO/3sRSoletb+WameuLjxH7onZafEirJX5Lnn5Fl9gQe8/naFzuqof9YNo69ba6TlryN2G1yhQdj/Qik/8Zpo01Nf4QK+eTg+yjIzw3TTAqjmntNF8aZPv8=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
i have my dom0 not showing the pci network interfaces upon lspci.
dom0 only has one dummy interface when it boots
/etc/modules contains "dummy -o dummy0

in my domU config file i added the lines
nics = 3
pci = [ '00,11,0' , '00,12,0' ] #these are the address of the nics I hide from dom0

once both domains are loaded ifconfig shows dummy0 configured the way it was in /etc/network/interfaces
additionally vif1.0 and vif 1.1 are shown unconfigured

brctl show
xen-br0        8000.c65260b5d9b3        no        dummy0

xm vif domU
(vif (idx 0) (vif 0) (mac aa:00:00:0e:b1:75) (vifname vif1.0) (evtchn 14 4) (index 0))
(vif (idx 1) (vif 1) (mac aa:00:00:0e:b1:75) (vifname vif1.1) (evtchn 15 5) (index 1))

Inside of my domU I have configured eth0 and eth1 with addresses on the LAN and the proper gateway yet i can not ping out. I really think im missing some small point. Also I am confused by the above output of "brctl show", does this mean xen-br0 is connected to dummy0 vif1.0 and vif1.1 or just connected to dummy0 and vif's are not connected to anything on dom0? On another note, i tried lspci inside of domU and it showed nothing, but i didn't expect it to. so, is there any way to verify the pci devices are attached to the domu?

Thank you,
Frank  Di Rocco

"Does an optimistic person look at a hard drive as half-full or half-empty?" -ofanged1-at-gmail.com
Xen-users mailing list