Not built into ovirt AFAIK,  but an ebtables rule can allow you to filter out 
mac+ip combinations 

Look at the anti-spoofing rules on

It doesn't prevent the user adding it in the vm, but the infrastructure blocks 
it's usage.

From: Bill Bill <>
Sent: Aug 3, 2016 22:40
Subject: [ovirt-users] IP Address Stealing



It is possible to prevent a VM from adding an IP? For example, if we provision 
a VM with one IP, if the user has root access they can simply add random IP’s 
from within the same range as sub interfaces: eth0:0 eth0:1 eth0:2 so on and so 


Subnetting is not ideal in this situation because it’s a huge waste of IP space.

Users mailing list

Reply via email to