[ovirt-users] Re: Ovirt VLAN Primer

2021-02-03 Thread David Johnson
Thank you. I got so buried in the mechanics that I lost sight of the purpose of the tagging. The tagged network should not be able to ping the untagged - that was the whole purpose of the exercise. The real problem is that the untagged network is unable to see its gateway to the internet, which

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread Ales Musil
On Tue, Feb 2, 2021 at 8:07 PM Dan Yasny wrote: > > > On Tue, Feb 2, 2021 at 2:00 PM David Johnson > wrote: > >> Ah ... so if I connected one of the other ethernet ports to the tagged >> traffic (second physical network for tagged traffic), it should work as I >> expect? >> > > Yes, if there

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread Dan Yasny
On Tue, Feb 2, 2021 at 2:00 PM David Johnson wrote: > Ah ... so if I connected one of the other ethernet ports to the tagged > traffic (second physical network for tagged traffic), it should work as I > expect? > Yes, if there are no untagged networks attached > Regards, > David Johnson >

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread David Johnson
Ah ... so if I connected one of the other ethernet ports to the tagged traffic (second physical network for tagged traffic), it should work as I expect? Regards, David Johnson Director of Development, Maxis Technology 844.696.2947 ext 702 (o) | 479.531.3590 (c) djohn...@maxistechnology.com

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread Dan Yasny
You're trying to mix tagged and untagged traffic. That, iirc, isn't supported for security reasons (the untagged network can see all the tagged traffic). You can put multiple tagged networks on the same NIC though. Please check with the ovirt folks though, it's been a while since I last checked

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread David Johnson
I have a physical network ovirtmgmt, and a logical network 10-non-prod with the vlan tag of 10 and the network label of 10. The physical and vlan have both been dragged to the enp0 NIC on the host. What I understand from this is that the bridge has been there all along, but, since I can't ping

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread Dan Yasny
On Tue, Feb 2, 2021 at 1:38 PM David Johnson wrote: > Thanks, this is a step closer, but the details are still very sketchy. > > Following the instructions at > https://www.ovirt.org/documentation/administration_guide/#appe-Custom_Network_Properties > : > > If I understand the instructions

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread David Johnson
Thanks, this is a step closer, but the details are still very sketchy. Following the instructions at https://www.ovirt.org/documentation/administration_guide/#appe-Custom_Network_Properties : If I understand the instructions correctly: 1. Open the host in the Ovirt UI 2. Go to the Network

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread Dan Yasny
On Tue, Feb 2, 2021 at 10:20 AM David Johnson wrote: > This is great ... I am missing the bridge (at least). > > Does the bridge reside on the host or the VM? Is it created in the Ovirt > UI, or in the VM operating system? > On the host. Logical networks in oVirt are a virtual construct,

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread David Johnson
This is great ... I am missing the bridge (at least). Does the bridge reside on the host or the VM? Is it created in the Ovirt UI, or in the VM operating system? Thanks! David Johnson On Tue, Feb 2, 2021 at 9:16 AM Dan Yasny wrote: > > > On Tue, Feb 2, 2021 at 10:06 AM David Johnson < >

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread Dan Yasny
On Tue, Feb 2, 2021 at 10:06 AM David Johnson wrote: > Good morning Ales, > > Thank you for your response. > > At this point, while I believe I have marked the networks as required, I > am hesitant to assume that they are marked because I don't understand for > sure which pieces I don't

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-02 Thread David Johnson
Good morning Ales, Thank you for your response. At this point, while I believe I have marked the networks as required, I am hesitant to assume that they are marked because I don't understand for sure which pieces I don't understand. Unfortunately, what I am missing is a number of random bits

[ovirt-users] Re: Ovirt VLAN Primer

2021-02-01 Thread Ales Musil
On Tue, Feb 2, 2021 at 6:18 AM David Johnson wrote: > Good morning all, > > On my ovirt 4.4.4 cluster, I am trying to use VLan's to separate VM's for > security purposes. > > Is there a usable how-to document that describes how to configure the > vlan's so they actually function without taking