similar to: guest A from virbr0 can talk to guest B in virbr1 but not vice versa

On Tue, Jun 20, 2017 at 02:26:59AM -0400, Travis S. Johnson wrote: >Hello, > >I came across an interesting problem in my home lab a few weeks ago as I'm >prepping for my RHCE exam using Michael Jang study guide. I've been at this >for days now, and I still can't wrap my head around how two or more virtual >networks in default NAT configuration are even allowed to

On Tue, Jun 20, 2017 at 10:05:19AM +0200, Martin Kletzander wrote: >On Tue, Jun 20, 2017 at 02:26:59AM -0400, Travis S. Johnson wrote: >>Hello, >> >>I came across an interesting problem in my home lab a few weeks ago as I'm >>prepping for my RHCE exam using Michael Jang study guide. I've been at this >>for days now, and I still can't wrap my head around

Hello, I have first a question (and then may be a problem), that I have difficulties to understand and eventually to investigate. On each of my guests VM, I see constantly a RX dropped number increasing , Even if the VM does nothing ! ifconfig eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 inet 192.168.100.15 netmask 255.255.255.0 broadcast 192.168.100.255

>Sorry, have to correct myself. Had to much to do today on OpenShift. >There is no Docker involved in what we discuss. The firewall rules for >the host bridge devices get created by libvirtd. Thanks I was using iptables and not converted to firewalld. I am doing so now. Will I need to delete the VM and re-add it ? I am rebooting first. Jerry

I have CentOS 7 host. Two guests on bridge network setup by GUI and virt-manager. 1 CentOS 8 guest 1 Win 10 guest Both cannot access the host. They can other machines on the network. Guests can access the internet just not the host. I used virt-manager GUi to set up everything. Selected the eth0:macvtap and Bridge. I "desire" bridge network. If I select something else I get access to

Hi everyone. Those are the iptables forwarding rules associated with the two virtual networks on my machine: ----------------------------------------------------------------------------------------- -A FORWARD -d 192.168.100.0/24 -o virbr1 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -s 192.168.100.0/24 -i virbr1 -j ACCEPT -A FORWARD -i virbr1 -o virbr1 -j ACCEPT -A FORWARD -o

Hi all, I have 3 guests (2-RHEL4 and 1 RHEL6) and have some issues regarding networking between them. The 2 RHEL4 system's use default bridge virbr0 and get ip's of range 192.168.122.0/24 (192.168.122.207, 192.168.122.167) I created another bridge (virbr1) with NAT forwarding (no dhcp). The network i choose was 192.168.100.0/24. And the third system (RHEL6) was assigned static ip-addres

I'm trying to migrate my VirtualBox test lab to KVM. In my VB configuration, I have several VM routers with 4 interfaces each. Each router has a bridged interface which connects them all together and to the outside world. I have servers/clients dispersed on each of the other private (Isolated) segments that use the routers as default gateways. In trying to make this work, I used Virtual

Hello All- I've looked in several places and haven't found an answer to this question: is it possible to have libvirt add custom rules to iptables for virtual network interfaces? I took a look at the "Firewall and Network Filtering in Libvirt" page and it seems overly complicated for what I want to do. Given an interface virbr2 and its network 192.168.4.0/24, libvirt installs

Hi. I have a machine with a local DHCP server and a couple of virtual networks and I've configured the server for each virtual interface, so that I would be able to install VMs on the corresponding subnets using PXE. The problem is that the two DHCP servers (my local server and dnsmasq) are conflicting with each other causing the boot process to either fails or takes ages untill a VM can

On 10/5/2014 1:56 AM, Bhasker C V wrote: > On 04/10/14 21:13, The Cop wrote: >> On 10/4/2014 8:46 PM, Bhasker C V wrote: >>> On 04/10/14 15:36, The Cop wrote: >>>> Hello, >>>> >>>> I am trying to assign an IPv6 address to one of my guests. I followed the >>>> following guide, unsuccessfully: >>>> >>

Hello, Finally I managed to get a xen 4.0 working on ubuntu 10.04 with pvops kernel and libvirt. However I am having some problems with networking... after initial installation with netinstall image in hvm mode, when I transform the vm in xen pv (via pygrub with the current ubuntu kernel), networking startEd to act weird... Basically I''m not using a network script from xen. I define a

Hello, Finally I managed to get a xen 4.0 working on ubuntu 10.04 with pvops kernel and libvirt. However I am having some problems with networking... after initial installation with netinstall image in hvm mode, when I transform the vm in xen pv (via pygrub with the current ubuntu kernel), networking startEd to act weird... Basically I''m not using a network script from xen. I define a

I just wrote this to assist some Red Hat folks understanding what libvirt does with iptables, and thought it is useful info for the whole libvirt community. When I have time I'll adjust this content so that it can fit into the website in relevant pages/places. Firewall / network filtering in libvirt ======================================= There are three pieces of libvirt

I have created a routed virtual network. From within the routed net, DNS requests to the dnsmasq interface virbr2 work fine. On the libvirt host, DNS requests to the dnsmasq interface virbr2 work fine. I would like to allow external hosts, on the same network as the libvirt host, to query the dnsmasq interface. However external DNS queries to the virbr2 interface time out. The iptables firewall

Hi, I haven't been to find this (NetworkManager) change documented. On: CentOS Linux release 7.1.1503 (Core) $ /bin/nmcli con NAME UUID TYPE DEVICE ens32 7629e52d-bd42-4cd5-a424-8c58e7e0bf37 802-3-ethernet ens32 On: CentOS Linux release 7.2.1511 (Core) $ /bin/nmcli con NAME UUID TYPE

On 06/20/2017 05:27 AM, Martin Kletzander wrote: > On Tue, Jun 20, 2017 at 10:05:19AM +0200, Martin Kletzander wrote: >> On Tue, Jun 20, 2017 at 02:26:59AM -0400, Travis S. Johnson wrote: >>> Hello, >>> >>> I came across an interesting problem in my home lab a few weeks ago >>> as I'm >>> prepping for my RHCE exam using Michael Jang study

Hi, I've been trying to migrate some of my CentOS 7 KVM hypervisors to CentOS 8, and I have encountered the following issue while trying to load my network config: virsh:     error: Failed to start network test1     error: internal error: Network is already in use by interface virbr2 journalctl:     error : networkCheckRouteCollision:123 : internal error: Network is already in use by

I'm looking for some information regarding the interaction of KVM, VLANs, firewalld, and the kernel's forwarding configuration. I would appreciate input especially from anyone already running a similar configuration in production. In short, I'm trying to figure out if a current configuration is inadvertently opening up traffic across network segments. On earlier versions of CentOS

Nakta wrote: > libvirts nwfilter module can achieve that. I read over those resources and I did what I thought would be correct, but it's not having any effect. I created a new nwfilter like this: <filter name='allow-virbr2-vpn' chain='ipv4' priority='-700'> <rule action='accept' direction='in' priority='500'> <all