[Xen-users] nat via Dom0 using bridges doesn't work

["Marco Sinhoreli" <msinhore@xxxxxxxxx>]

Hello there,

please helpme! :-)

I have 3 phisical NICs on my machine configured to use network-bridge
script. This is my network designer:
                     ---------------------------------
                    -----------------------
                     |                                        |
                             |  Stations VLAN1  |
                     |                           eth1 <xenbr0> VLAN1
             /  -----------------------
INTRANET <xenbr0> eth0     DOM0            |                >- Switch -<
                     |                           eth2 <xenbr2> VLAN2
             \   -----------------------
                     |                                        |
                              |  Stations VLAN2  |
                     ---------------------------------
                     -----------------------

Well, I want enable nat via DOM0 for all Stations at VLAN1 and VLAN2
but I don't understand because this doesn't work.

ip_forward is enable and iptables nat for all IPs with output via eth0

echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

My Xen files:

------ xend-config.sxp
(network-script custom-network-bridge)
(vif-script vif-bridge)

------ scripts/custom-network-bridge
#!/bin/sh
XENDIR="/etc/xen/scripts"
$XENDIR/network-bridge-0 "$@"
$XENDIR/network-bridge-1 "$@"
$XENDIR/network-bridge-2 "$@"

------ variables in script/network-bridge-0
vifnum=0
bridge=${bridge:-xenbr${vifnum}}
netdev=eth0
antispoof=${antispoof:-no}

------ variables in script/network-bridge-1
vifnum=1
bridge=${bridge:-xenbr${vifnum}}
netdev=eth1
antispoof=${antispoof:-no}

------ variables in script/network-bridge-2
vifnum=2
bridge=${bridge:-xenbr${vifnum}}
netdev=eth2
antispoof=${antispoof:-no}

Any idea?

regards

--
Marco Sinhoreli
http://msinhore.blogspot.com

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users