On Sun, Mar 13, 2011 at 1:46 PM, Alexey Eromenko <[email protected]> wrote:
> On Sun, Mar 13, 2011 at 1:34 PM, Christian Alis <[email protected]> wrote:
>> Hi!
>>
>> I would like to set up a web server for our institute. This web server is a
>> virtual machine (Centos 5.4) running on our internal server (Centos 5.4). 
>> This
>> virtual machine is supposed to be placed in the DMZ and so it has a different
>> subnet from the internal server. If it were a real machine, enabling 
>> proxy-arp
>> in our switch would make the virtual machine accessible in the DMZ and 
>> outside
>> network. However, the VM is inaccessible even in the internal subnet.
>>
>> I am under the impression that this is possible with virtualbox's bridged
>> ethernet interface because virtualbox's "network manager" places the real
>> interface into promiscuous mode and packets sent and received by and for the
>> guests use the guests' MAC and IP address. Is my impression wrong? If not, 
>> what
>> I am doing wrong? Is there a better approach to my problem?
>>
>
> Bridged mode *is* the solution.
>
> Your guest will be able to connect both-ways (upload+download) to your
> real network.
> Simply bridge your VM's eth0 to host's "eth0" and you're done.
>
> If you want more security, then bridge VM's eth0 to host's "eth1" NIC,
> but remove IP addresses from host's "eth1".
>

This is assuming that your "eth1" host NIC will be dedicated to
guest's data, and "eth0" host NIC will be dedicated for controlling
your host.

-- 
-Alexey Eromenko "Technologov"

------------------------------------------------------------------------------
Colocation vs. Managed Hosting
A question and answer guide to determining the best fit
for your organization - today and in the future.
http://p.sf.net/sfu/internap-sfd2d
_______________________________________________
VBox-users-community mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/vbox-users-community

Reply via email to