Re: [Xen-users] Firewall in domU, networking in XEN

[Sławek Kosowski <slawek.k_xl@xxxxx>]

Thank you guys for help.
I like the idea of bridging eth0 with vif1.0 and then just bridging vif0.0 with 
vif1.1

The idea for custom network script for dom0 that will be referenced in 
/etc/xen/xend-config.sxp (probably incomplete and completely untested):
ip link set eth0 down
ip link set eth0 mac fe:ff:ff:ff:ff:ff arp off
# just bridge for domU1 
brctl addbr xenbr0 
brctl setfd xenbr0 0
brctl addif xenbr0 eth0
ip link set xenbr0 up
ip link set eth0 up

# bridge for loc
brctl addbr xenbr1
brctl setfd xenbr1 0
brctl addif xenbr1 vif0.0
ip link set xenbr1 up
ip link set vif0.0 up
ifconfig vif0.0 192.168.2.2

#bridge for dmz
brctl addbr xenbr2
brctl stp xenbr1 off
brctl setfd xenbr1 0
ip link set xenbr2 up

Then in domU1 config file I'll instantiate:

vif=[ 'bridge=xenbr0', 'mac=00:16:3e:07:d2:0e', 'bridge=xenbr1', 
'mac=00:16:3e:07:d2:0f', 'bridge=xenbr2', 'mac=00:16:3e:07:d2:10' ]

What should be changed and how ?

Slawomir Kosowski




_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxx
http://lists.xen.org/xen-users