Xen users - Nov 2005 - Question about assigning NICS

I am in process of implementing a Dom0 setup with several DomU''s, one
of
which will be a firewall. 

I have 3 NICs in the host machine, and wish to assign them to the
Firewall "guest" (though it''ll need to use a privileged
kernel).

I plan on using a "dummy" interface on each DomX for management (and
this will be the only way Dom0 can be accessed -- remotely, anyway;
there will always be direct console access)

My question:

My ISP assigned my IP via DHCP.  If I assign the NIC the Internet is
plugged into to the firewall "guest", will the IP my ISP asigns show
up
on the corresponding interface on the firewall "guest"?

The reason I ask is I currently have the Internet plugged into Dom0
(where all the NICS are currently accessed) and created a bridge for
interface.  The firewall DomU can access all three bridges, but the one
assigned to the "public" interface has to have a private IP still.

TIA.

-Alan



_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users

On Sat, 2005-11-19 at 12:29 +0100, Stephan Seitz wrote:
> i don''t see your problem. you surely don''t need
privileged domU''s for
> accessing a NIC at protocol level.
That is my misunderstanding, then; I had read that in another post while
I was searching for Xen + DomU firewall setups.
> if i understand you right, you''re going to configure a domU as
> firewall to the internet?
Correct.
> so, if your ISP provides you with dhcp, the only thing you need is the
> xenbr0 configured as right out of the
> box and one domU configuring it''s primary (thou virtual) NIC via
dhcp.
Will the domU''s NIC (eth0, configured through DHCP) get the IP address
from the ISP or from the DHCP server I currently have on my network?

> at dom0 you''ll probably want to setup
> a private net (just keep the nic the xenbr0 is bound to out of use).
My host machine has three NICs.  I currently have the following bridges
and mappings created:

  xen-br-pub -> eth0 (will be the Internet connection)
  xen-br-lan -> eth1 (will be my private network machines)
  xen-br-dmz -> eth2 (will be publicly-accessible machines)

All three NICS are currently "assigned" to dom0, but I want to assign
all of them to the firewall and hide them from domU.  If I do this, will
I still need to create the bridges?

Once I have all three NICs assigned to the firewall domU, I am planning
to create another brdige + dummy interface:

  xen-br-adm -> dummy0

which will connect to a corresponding dummy interface on the firewall so
I can log into domU remotely to manage the different domains, or setup a
new one, if necessary.

-Alan



_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users