Re: [Users] Networking questions (LONG)

2014-01-11 Thread Alan Murrell
Quoting Dan Kenigsberg dan...@redhat.com: This was devised as a security constraint - otherwise, a VM attached to the non-VLAN network could sniff traffic from another (VLAN) network. However, it seems that this is exactly what you need - a special VM that is designed to do just that. Well, I

Re: [Users] Networking questions (LONG)

2014-01-11 Thread bigclouds
hi,Alan i think the best way to solve your question is openvswitch(corresponding to vmware vswitch). but it has not been intigrated with ovirt. your solution by adding dummy ethernet, i do not think it can work as you expect. because vm's ethernet(vnet) is vlan-aware or not. if it is

Re: [Users] Networking questions (LONG)

2014-01-10 Thread Lior Vernia
Hi Allan, On 10/01/14 02:16, Alan Murrell wrote: Hello Lior, Thank you for your reply. Sure, let's try to get that setup of yours working :) Quoting Lior Vernia lver...@redhat.com: This way the firewall VM will get something like eth1 for VLAN 1, eth2 for VLAN 200 and so forth, which

Re: [Users] Networking questions (LONG)

2014-01-10 Thread Dan Kenigsberg
On Thu, Jan 09, 2014 at 10:53:25PM +0200, Lior Vernia wrote: Hello Alan, On 09/01/14 10:07, Alan Murrell wrote: Hello, I am evaluating oVirt as a replacement/alternative to VMware deployments we typically do. I have installed and all-in-one setup on a test box (which itself used to

Re: [Users] Networking questions (LONG)

2014-01-10 Thread Juan Pablo Lorier
Hi Dan, I take the chance to ask; why is that the untagged IF can see the traffic of the tagged vlans? Isn't that filtered at kernel level? Is this a virtualization design limitation or is it down to the kernel? I don't know how the kernel processes the packages, but I thought that packages that

Re: [Users] Networking questions (LONG)

2014-01-10 Thread Itamar Heim
On 01/10/2014 01:32 PM, Dan Kenigsberg wrote: On Thu, Jan 09, 2014 at 10:53:25PM +0200, Lior Vernia wrote: Hello Alan, On 09/01/14 10:07, Alan Murrell wrote: Hello, I am evaluating oVirt as a replacement/alternative to VMware deployments we typically do. I have installed and all-in-one

Re: [Users] Networking questions (LONG)

2014-01-10 Thread Dan Kenigsberg
On Fri, Jan 10, 2014 at 10:39:20AM -0200, Juan Pablo Lorier wrote: Hi Dan, I take the chance to ask; why is that the untagged IF can see the traffic of the tagged vlans? Isn't that filtered at kernel level? Is this a virtualization design limitation or is it down to the kernel? I don't know

Re: [Users] Networking questions (LONG)

2014-01-10 Thread Dan Kenigsberg
On Fri, Jan 10, 2014 at 03:06:28PM +0200, Itamar Heim wrote: On 01/10/2014 01:32 PM, Dan Kenigsberg wrote: On Thu, Jan 09, 2014 at 10:53:25PM +0200, Lior Vernia wrote: Hello Alan, On 09/01/14 10:07, Alan Murrell wrote: Hello, I am evaluating oVirt as a replacement/alternative to VMware

[Users] Networking questions (LONG)

2014-01-09 Thread Alan Murrell
Hello, I am evaluating oVirt as a replacement/alternative to VMware deployments we typically do. I have installed and all-in-one setup on a test box (which itself used to be an ESXi server), but it only has one NIC. I trying to duplicate our typical configuration we do in VMware, which is

Re: [Users] Networking questions (LONG)

2014-01-09 Thread Alan Murrell
One other question to add: If I do indeed ned to create a new bridge (ovirtvm in my example), I do not want to assign any IPs to it, nor any of the logical networks I create. When I did try this in my fooling around, oVirt would not let me save the changes, giving me an error about

Re: [Users] Networking questions (LONG)

2014-01-09 Thread Sven Kieske
Just as a quick shot: it is possible to configure it the way you want (ip-less bridges), but I can't exactly tell you what you're doing wrong atm. ip-less bridges work here with vlans and stuff, so keep trying or post more info about your setup :-) Am 09.01.2014 09:22, schrieb Alan Murrell:

Re: [Users] Networking questions (LONG)

2014-01-09 Thread Lior Vernia
Hello Alan, On 09/01/14 10:07, Alan Murrell wrote: Hello, I am evaluating oVirt as a replacement/alternative to VMware deployments we typically do. I have installed and all-in-one setup on a test box (which itself used to be an ESXi server), but it only has one NIC. I trying to duplicate