XEN Bridges with Debian: Unterschied zwischen den Versionen

Aus Neobikers Wiki
Zur Navigation springen Zur Suche springen
Keine Bearbeitungszusammenfassung
Keine Bearbeitungszusammenfassung
 
(Eine dazwischenliegende Version desselben Benutzers wird nicht angezeigt)
Zeile 15: Zeile 15:
File: '''/etc/network/interfaces.d/xenbridges'''
File: '''/etc/network/interfaces.d/xenbridges'''
<pre>
<pre>
root@corsair:/etc/network# cat interfaces.d/xenbridges
# interfaces(5) file used by ifup(8) and ifdown(8)
# interfaces(5) file used by ifup(8) and ifdown(8)
# Included from /etc/network/interfaces
# Included from /etc/network/interfaces


# ---------------------------------
# settings for all XEN bridges
# settings for all XEN bridges
# ---------------------------------
iface xenbridge inet manual
iface xenbridge inet manual
         pre-up brctl addbr $IFACE
         pre-up brctl addbr $IFACE
Zeile 30: Zeile 31:
         post-down brctl delbr $IFACE
         post-down brctl delbr $IFACE


# ---------------------------------
# br0intern
# eth0 -> intern, the internal lan
# eth0 -> intern, the internal lan
# 192.168.2.5
# ---------------------------------
iface br0intern inet static inherits xenbridge
iface br0intern inet static inherits xenbridge
         address 192.168.2.5/24
         address 192.168.2.5/24
Zeile 36: Zeile 41:
         bridge_ports eth0
         bridge_ports eth0


# ---------------------------------
# br1extern
# eth1 -> extern, the internet/router
# eth1 -> extern, the internet/router
# not used (firewall uses physical device)
# ---------------------------------
iface br1extern inet manual inherits xenbridge
iface br1extern inet manual inherits xenbridge
#        bridge_ports eth1
#        bridge_ports eth1


# ---------------------------------
# br2dmz
# none -> dmz, firewall-zone only
# none -> dmz, firewall-zone only
# ---------------------------------
iface br2dmz inet manual inherits xenbridge
iface br2dmz inet manual inherits xenbridge


# wlan -> eth3 or none=firewall zone
# ---------------------------------
# br3wlan
# wlan -> eth3 or firewall-zone
# ---------------------------------
iface br3wlan inet manual inherits xenbridge
iface br3wlan inet manual inherits xenbridge
#        bridge_ports eth3
#        bridge_ports eth3


# ---------------------------------
# br4off
# none -> offline zone
# none -> offline zone
# ---------------------------------
iface br4off inet manual inherits xenbridge
iface br4off inet manual inherits xenbridge
</pre>
</pre>
[[Bild:XEN-Netz-Setup.jpg]]

Aktuelle Version vom 26. Dezember 2020, 13:01 Uhr

Ich verwende die folgende Netzwerkkonfiguration mit XEN:

  • br0intern -> internal LAN (GREEN)
  • br1extern -> WAN (RED) -> not used !!
  • br2dmz -> DMZ (ORANGE)
  • br3wlan -> WLAN (BLUE)
  • br4off -> no network connection

Nur die interne Bridge (br0intern) wird direkt mit einer Netzwerkkarte (eth0) verbunden und mit einer IP-Adresse versehen.

Die XEN-Bridges (br2dmz, br3wlan) haben initial keine eigenen Verbindungen. Eine XEN-Bridge (br4off) bekommt nie eine Verbindung.

Die externe Bridge (br1extern) wird nur konfiguriert aber nicht gestartet, da die Firewall direkt eth2 verwendet und keine Bridge benötigt.

File: /etc/network/interfaces.d/xenbridges

# interfaces(5) file used by ifup(8) and ifdown(8)
# Included from /etc/network/interfaces

# ---------------------------------
# settings for all XEN bridges
# ---------------------------------
iface xenbridge inet manual
        pre-up brctl addbr $IFACE
        bridge_fd 0
        bridge_stp off
        bridge_hello 1
        bridge_maxwait 0
        bridge_waitport 0
        post-up ip link set $IFACE promisc off
        post-down brctl delbr $IFACE

# ---------------------------------
# br0intern
# eth0 -> intern, the internal lan
# 192.168.2.5
# ---------------------------------
iface br0intern inet static inherits xenbridge
        address 192.168.2.5/24
        gateway 192.168.2.12
        bridge_ports eth0

# ---------------------------------
# br1extern
# eth1 -> extern, the internet/router
# not used (firewall uses physical device)
# ---------------------------------
iface br1extern inet manual inherits xenbridge
#        bridge_ports eth1

# ---------------------------------
# br2dmz
# none -> dmz, firewall-zone only
# ---------------------------------
iface br2dmz inet manual inherits xenbridge

# ---------------------------------
# br3wlan
# wlan -> eth3 or firewall-zone
# ---------------------------------
iface br3wlan inet manual inherits xenbridge
#        bridge_ports eth3

# ---------------------------------
# br4off
# none -> offline zone
# ---------------------------------
iface br4off inet manual inherits xenbridge