Of course, you can cascade 2x EFW this way, but as you see, i'm currently testing 2.6.18 XEN kernel in EFW 2.2 Beta1 where we can use PCI-Devices (e.g. Network Cards) within the DomU. neobiker
bgschaid wrote: > > Thanks a lot. Of course the answer doesn't make me happy, but it spares me > the need to do further experimentation. > > But am I correct in assuming that the 3-Device-limit does only apply for > one domU? Then I could cascade two firewalls? One using bridges0-2 and the > other one bridges2-3 > > Bernhard > > > Neobiker wrote: >> >> XEN only supports 3 virtual Net-Devices! >> We have to use a newer XEN Kernel with FrontendPCI Support to get the >> NICs physically attached in the DomU. >> >> neobiker >> >> bgschaid wrote: >>> >>> Hi! >>> >>> I set up a EFW 2.1.2 the way it is described by Bill Pye (EFW in XEN on >>> CentOS5) using the network-fw script by Neobiker. >>> >>> The original setup was for 3 interfaces all of which were bridged to >>> three physical interfaces in the machine. This works fine. I then >>> decided that I wanted a fourth interface on the firewall and added a >>> dummy-network-device. >>> >>> Now my problem is: all 4 bridges (eth0-2 and dummy0) get created, but >>> when the EFW-domU is booted with "xm create -c efw" it hangs at this >>> message (I'll append the complete boot message at the end, but here I >>> show only the last few lines): >>> >>> Creating root device >>> Mounting root filesystem >>> kjournald starting. Commit interval 5 seconds >>> EXT3-fs: mounted filesystem with ordered data mode. >>> Switching to new root >>> INIT: version 2.85 booting >>> Mounting /proc filesystem >>> >>> Now, I don't think that the dummy device is the problem, because I can >>> boot the EFW with any combination of three bridged devices (But not with >>> 4) >>> >>> Could anybody enligthen me what might be the problem: >>> - Does EFW-2.1.2-Community only allow 3 network devices? >>> - Is the problem that I did the original configuration with only 3 >>> devices? >>> - Did I miss something configuring Xen? >>> >>> Thanks >>> Bernhard >>> >>> PS: The full boot message: >>> >>> --- snipped --- >>> >>> >> >> > > -- View this message in context: http://www.nabble.com/Adding-a-fourth-interface-to-a-Endian-2.1.2-in-Xen-domU-tf4793058.html#a13733190 Sent from the efw-user mailing list archive at Nabble.com. ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Efw-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/efw-user
