WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] mac spoofing

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] mac spoofing
From: "Heiko.Garrelfs" <Heiko.Garrelfs@xxxxxx>
Date: Fri, 19 May 2006 19:45:18 +0200
Delivery-date: Fri, 19 May 2006 10:44:38 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <200605190723.51212.javier@xxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <446DB4CE.6030308@xxxxxx> <200605190723.51212.javier@xxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Thunderbird 1.5.0.2 (Windows/20060308)
Thanks for this answer, I had not thought about stp before.

But as far as I understand, STP is turned off by default in the
network-bridge script ( ca line 160 in function create_bridge()

Is there another place to disable it ?




Javier Guerra wrote:

Javier Guerra wrote:
> On Friday 19 May 2006 7:06 am, Heiko.Garrelfs wrote:
>> ( btw: at that point,  I had not configured any domU's )
>>
>> From the Xen Docs I understand that the bridge gets the mac from eth0
>> which is then diabled.
>>
>> So - I dont understand where the 'spoofed' Mac is coming from - at least
>> as long I have no domU running.
> 
> maybe the bridge is generating some STP (spanning tree protocol) events at 
> setting up time.  the hoster's switch interprets it as if you've put your own 
> switch at the given port (it would be a correct interpretation, btw).  try to 
> disable STP (brctl stp br0 off) before adding peth0 to it.
> 
>> ( I dont want to use NAT: I have two IPs ( only one NIC )for the Server
>> and want the dom0 and one domU to run on one IP each. )
> 
> make sure that you're allowed to put two machines at that port.  if you don't 
> use NAT or routing you'll have to use two MACs at a single port.  maybe 
> you'll have to ask them to register your new MAC to add it to their bridging 
> table.
> 
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>