WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Re: Setting up firewall as Dom-U

To: "Joseph L. Casale" <jcasale@xxxxxxxxxxxxxxxxx>
Subject: Re: [Xen-users] Re: Setting up firewall as Dom-U
From: "Gordon McLellan" <gordonthree@xxxxxxxxx>
Date: Sat, 12 Apr 2008 15:52:56 -0400
Cc: "xen-users@xxxxxxxxxxxxxxxxxxx" <xen-users@xxxxxxxxxxxxxxxxxxx>
Delivery-date: Sat, 12 Apr 2008 12:53:26 -0700
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=94LBl3iJeoI6NLFKAwgQdmeo6V1yupzg2nTpiBdR7TY=; b=mnEETmRlnWvaPdyBdjB8bUm28Js9wUccYEwLZX9CRn1ICCVVnkhxw+mgwzTAJZOigv5LRJ0AL6OGLVWBg0F/DlN2335swtBDztUTyVNiqfWMUMG6fnjP6USjT3iAUNlse//JTPrCdRLqGN6lURMz7daBvCgVnk9EFwqxQu/Xvrg=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=CWfCBay3Ly8lpHPjeRyvQRKJATVgGBYIeRRd5eXWUz61lJdXw0IxPZJuciGHtgtV8gCfulT0ww+MwY6KJ4RNC4HK4zxpw/0slw0c/333pGrhlDDz8a5Iy69yRz4lS7hyVl9zIDx007opO3TEvXxIR+GtiEWHIqUNwmC7brrjyXk=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <1C8CF1EA1A5B5940B81B0710B2A4C93856C03FE2E0@xxxxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <1C8CF1EA1A5B5940B81B0710B2A4C93856C03FE2DB@xxxxxxxxxxxxxxxxxxxxxxx> <ftpspo$920$1@xxxxxxxxxxxxx> <1C8CF1EA1A5B5940B81B0710B2A4C93856C03FE2DC@xxxxxxxxxxxxxxxxxxxxxxx> <f64d94760804121116o15962f13jde06e002ae5cdada@xxxxxxxxxxxxxx> <1C8CF1EA1A5B5940B81B0710B2A4C93856C03FE2E0@xxxxxxxxxxxxxxxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Here's my vif line:

vif = [ "mac=00:16:3e:40:9b:8c,bridge=xenbr0,type=ioemu",
"mac=00:16:3e:40:9b:8d,bridge=xenbr1,type=ioemu",
"mac=00:16:3e:40:9b:8e,bridge=xenbr2,type=ioemu",
"mac=00:16:3e:40:9b:8f,bridge=xenbr3,type=ioemu", ]

I chose sequential mac addresses, for no reason in particular.  Xend
had assigned the first mac, so I just kept adding 1 to it.

also under etc/xen/scripts, I created this script to setup the bridges
- it only seems to work at boot, running the script after the system
is booted yielded weird results for me

# cat my-network-script
#!/bin/sh
dir=$(dirname "$0")
"$dir/network-bridge" "$@" vifnum=0 netdev=eth0 bridge=xenbr0
"$dir/network-bridge" "$@" vifnum=1 netdev=eth1 bridge=xenbr1
"$dir/network-bridge" "$@" vifnum=2 netdev=eth2 bridge=xenbr2
"$dir/network-bridge" "$@" vifnum=3 netdev=dummy0 bridge=xenbr3

you also need to change /etc/xen/xend-config.sxp and tell it to run
your script, instead of the default.

Gordon

On Sat, Apr 12, 2008 at 9:02 PM, Joseph L. Casale
<jcasale@xxxxxxxxxxxxxxxxx> wrote:
>  This is exactly my config, same OS etc. So in the hvm config, you dos 
> something like this:
>  vif = [ 'type=ioemu, mac=<mac 1>, bridge=xenbr0' , 'type=ioemu, mac=<mac 2>, 
> bridge=xenbr2' , 'etc...' ]
>
>  and then assume Astaro see's 4 nics?

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users