Re: [CentOS-virt] Network isolation for KVM guests (SOLVED)

2017-04-04 Thread Nux!
ion on CentOS" <centos-virt@centos.org> > Sent: Tuesday, 4 April, 2017 11:27:07 > Subject: Re: [CentOS-virt] Network isolation for KVM guests (SOLVED) > This can be if one of these interfaces isn't a wireless nic. But I need to > use a > wireless nic and another phys nic. &

Re: [CentOS-virt] Network isolation for KVM guests (SOLVED)

2017-04-04 Thread C. L. Martinez
- > > From: "C. L. Martinez" <carlopm...@gmail.com> > > To: "Discussion about the virtualization on CentOS" <centos-virt@centos.org> > > Sent: Friday, 31 March, 2017 19:18:43 > > Subject: Re: [CentOS-virt] Network isolation for KVM guests > > &

Re: [CentOS-virt] Network isolation for KVM guests

2017-04-04 Thread Nux!
on about the virtualization on CentOS" <centos-virt@centos.org> > Sent: Friday, 31 March, 2017 19:18:43 > Subject: Re: [CentOS-virt] Network isolation for KVM guests > On Fri, Mar 31, 2017 at 05:06:53PM +0200, Sven Kieske wrote: >> On 31/03/17 15:55, C. L. Martinez wrote: >

Re: [CentOS-virt] Network isolation for KVM guests

2017-03-31 Thread C. L. Martinez
On Fri, Mar 31, 2017 at 05:06:53PM +0200, Sven Kieske wrote: > On 31/03/17 15:55, C. L. Martinez wrote: > > I need to attach two physical interfaces to a guest and these phy > > interfaces have IP and routes assigned and I need to get them off the main > > routing table. > > I do not understand

Re: [CentOS-virt] Network isolation for KVM guests

2017-03-31 Thread Sven Kieske
On 31/03/17 15:55, C. L. Martinez wrote: > I need to attach two physical interfaces to a guest and these phy interfaces > have IP and routes assigned and I need to get them off the main routing table. I do not understand this. You can attach a physical (or virtual, doesn't matter), interface to

Re: [CentOS-virt] Network isolation for KVM guests

2017-03-31 Thread C. L. Martinez
On Fri, Mar 31, 2017 at 06:14:22AM -0400, Dima (Dan) Yasny wrote: > On Fri, Mar 31, 2017 at 5:56 AM, C. L. Martinez > wrote: > > > On Thu, Mar 30, 2017 at 06:15:28PM +0100, Nux! wrote: > > > Use libvirt with mac/ip spoofing enabled. > > > > > >

Re: [CentOS-virt] Network isolation for KVM guests

2017-03-31 Thread Dima (Dan) Yasny
On Fri, Mar 31, 2017 at 5:56 AM, C. L. Martinez wrote: > On Thu, Mar 30, 2017 at 06:15:28PM +0100, Nux! wrote: > > Use libvirt with mac/ip spoofing enabled. > > > > https://libvirt.org/formatnwfilter.html > > > > https://libvirt.org/firewall.html > > > > -- > > Sent from

Re: [CentOS-virt] Network isolation for KVM guests

2017-03-31 Thread Richard Landsman - Rimote
Hi, I don't see why this should not work with the given solutions. But I'm relatively new to KVM / libvirt. Alternative: Personally I use Shorewall (Shoreline FW) and bridge setups (also works with a bonding interface). This way you can create zones, interfaces, addresses, forwarding-rules

Re: [CentOS-virt] Network isolation for KVM guests

2017-03-31 Thread C. L. Martinez
On Thu, Mar 30, 2017 at 06:15:28PM +0100, Nux! wrote: > Use libvirt with mac/ip spoofing enabled. > > https://libvirt.org/formatnwfilter.html > > https://libvirt.org/firewall.html > > -- > Sent from the Delta quadrant using Borg technology! > Thanks Nux and Kristian but I don't see if these

Re: [CentOS-virt] Network isolation for KVM guests

2017-03-30 Thread Nux!
centos-virt@centos.org > Sent: Thursday, 30 March, 2017 15:06:58 > Subject: [CentOS-virt] Network isolation for KVM guests > Hi all, > > What options exists under CentOS hosts to work with isolated networks?. For > example, on BSD systems it is really trivial. In FreeBSD y

Re: [CentOS-virt] Network isolation for KVM guests

2017-03-30 Thread Kristián Feldsam
for KVM guests I use VLANs S pozdravem Kristián Feldsam Tel.: +420 773 303 353 E-mail.: ad...@feldhost.cz www.feldhost.cz - FeldHost poskytuje kvalitní hostingové a serverové služby za příznivou cenu. FELDSAM s.r.o. V rohu 434/3 Praha 4 – Libuš, PSČ 142 00 IČ: 290 60 958, DIČ: CZ290 60 958 C

[CentOS-virt] Network isolation for KVM guests

2017-03-30 Thread C. L. Martinez
Hi all, What options exists under CentOS hosts to work with isolated networks?. For example, on BSD systems it is really trivial. In FreeBSD you can use setfib tools and on OpenBSD it is possible to use rdomain options. In 30 secs it is possible to work with isolated networks and assign