|
|
|
|
|
|
|
|
|
|
xen-users
Re: [Xen-users] advanced bridging...
Hello, i've some remarks!
2007/5/3, Marc Patino Gómez <mpatino@xxxxxxxxxxxx>:
Hi again,
this is the config of xen in my Debian Etch:
/etc/xen/xend-config
(network-script network-bridge-wrapper) (vif-script vif-bridge) (dom0-min-mem 196) (dom0-cpus 0) (vncpasswd '')
---------------------------------------------------------------------------
/etc/xen/scripts/network-bridge-wrapper
/etc/xen/scripts/network-bridge start bridge=xenbr0 vifnum=0 /usr/sbin/brctl addbr xenbr1
/sbin/ifconfig xenbr1 up ----------------------------------------------------------------------------
the domu (Firewall)
/etc/xen/firewall-config.sxp
name="firewall" kernel="/boot/vmlinuz-
2.6.16.33-xenU-x86_64" root="/dev/hda1" cpu=3 memory=256 disk=['file:/xen1/firewall.img,hda1,w']
vif=[ 'mac=00:16:3e:70:21:02,bridge=xenbr0,vifname=firewall.eth0','mac=00:16:3e:70:32:02,bridge=xenbr1,vifname=
firewall.eth1' ] dhcp="off" ip="XX.XX.XX.XX" netmask="255.255.255.0" gateway="XX.XX.XX.XX" In my mind, there is a problem here, because you define one ip="
XX.XX.XX.XX" but you define two vif ... So where this ip is allocated? vifname=firewall or vifname=firewall.eth1?
hostname="firewall.domain.com"
extra="3"
>on_reboot = 'restart' on_crash = 'restart'
-------------------------------------------------------------------------------
in this domU (the firewall) I have a bridge between eth1 and eth0, you can do in CentOS way (inside the domain) ;)
here is the config file of a domu behind the FW:
/etc/xen/domu-config.sxp name="domu" kernel="/boot/vmlinuz-2.6.16.33-xenU-x86_64" root="/dev/hda1" cpu=3 memory=92 disk=['file:/xen1/domu.img,hda1,w']
vif=[ 'bridge=xenbrFW , vifname=domu.eth0' ] dhcp="off" ip="XX.XX.XX.XX" Here it 's good ! One ip for one vif !
netmask="255.255.255.0" gateway="XX.XX.XX.XX" hostname="domu.domain.com"
extra="3"
on_reboot = 'restart' on_crash = 'restart' ----------------------------------------------------------------------------------------------------
> Xen-users mailing list >
Xen-users@xxxxxxxxxxxxxxxxxxx > http://lists.xensource.com/xen-users
_______________________________________________
Xen-users mailing list Xen-users@xxxxxxxxxxxxxxxxxxx http://lists.xensource.com/xen-users
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|
|
|
|
|