XEN Bridges with Debian: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Keine Bearbeitungszusammenfassung |
Keine Bearbeitungszusammenfassung |
||
| (6 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) | |||
| Zeile 1: | Zeile 1: | ||
Ich verwende die folgende Netzwerkkonfiguration mit XEN: | Ich verwende die folgende Netzwerkkonfiguration mit XEN: | ||
* br0intern -> internal LAN (GREEN) | * br0intern -> internal LAN (GREEN) | ||
* br1extern -> WAN (RED) | * br1extern -> WAN (RED) -> not used !! | ||
* br2dmz -> DMZ (ORANGE) | * br2dmz -> DMZ (ORANGE) | ||
* br3wlan -> WLAN (BLUE) | * br3wlan -> WLAN (BLUE) | ||
* br4off -> no network connection | * br4off -> no network connection | ||
Nur die interne Bridge ('''br0intern''') wird direkt mit einer Netzwerkkarte ('''eth0''') verbunden und mit einer '''IP-Adresse''' versehen. | |||
Die XEN-Bridges ('''br2dmz''', '''br3wlan''') haben initial keine eigenen Verbindungen. | |||
Eine XEN-Bridge ('''br4off''') bekommt nie eine Verbindung. | |||
Die externe Bridge ('''br1extern''') wird '''nur konfiguriert''' aber nicht gestartet, da die Firewall direkt '''eth2''' verwendet und keine Bridge benötigt. | |||
File: '''/etc/network/interfaces.d/xenbridges''' | File: '''/etc/network/interfaces.d/xenbridges''' | ||
<pre> | <pre> | ||
# interfaces(5) file used by ifup(8) and ifdown(8) | # interfaces(5) file used by ifup(8) and ifdown(8) | ||
# Included from /etc/network/interfaces | # Included from /etc/network/interfaces | ||
# --------------------------------- | |||
# settings for all XEN bridges | # settings for all XEN bridges | ||
# --------------------------------- | |||
iface xenbridge inet manual | iface xenbridge inet manual | ||
pre-up brctl addbr $IFACE | pre-up brctl addbr $IFACE | ||
| Zeile 23: | Zeile 31: | ||
post-down brctl delbr $IFACE | post-down brctl delbr $IFACE | ||
# --------------------------------- | |||
# br0intern | |||
# eth0 -> intern, the internal lan | # eth0 -> intern, the internal lan | ||
# 192.168.2.5 | |||
# --------------------------------- | |||
iface br0intern inet static inherits xenbridge | iface br0intern inet static inherits xenbridge | ||
address 192.168.2.5/24 | address 192.168.2.5/24 | ||
| Zeile 29: | Zeile 41: | ||
bridge_ports eth0 | bridge_ports eth0 | ||
# --------------------------------- | |||
# br1extern | |||
# eth1 -> extern, the internet/router | # eth1 -> extern, the internet/router | ||
# not used (firewall uses physical device) | |||
# --------------------------------- | |||
iface br1extern inet manual inherits xenbridge | iface br1extern inet manual inherits xenbridge | ||
# bridge_ports eth1 | # bridge_ports eth1 | ||
# --------------------------------- | |||
# br2dmz | |||
# none -> dmz, firewall-zone only | # none -> dmz, firewall-zone only | ||
# --------------------------------- | |||
iface br2dmz inet manual inherits xenbridge | iface br2dmz inet manual inherits xenbridge | ||
# wlan -> eth3 or | # --------------------------------- | ||
# br3wlan | |||
# wlan -> eth3 or firewall-zone | |||
# --------------------------------- | |||
iface br3wlan inet manual inherits xenbridge | iface br3wlan inet manual inherits xenbridge | ||
# bridge_ports eth3 | # bridge_ports eth3 | ||
# --------------------------------- | |||
# br4off | |||
# none -> offline zone | # none -> offline zone | ||
# --------------------------------- | |||
iface br4off inet manual inherits xenbridge | iface br4off inet manual inherits xenbridge | ||
</pre> | </pre> | ||
[[Bild:XEN-Netz-Setup.jpg]] | |||
Aktuelle Version vom 26. Dezember 2020, 13:01 Uhr
Ich verwende die folgende Netzwerkkonfiguration mit XEN:
- br0intern -> internal LAN (GREEN)
- br1extern -> WAN (RED) -> not used !!
- br2dmz -> DMZ (ORANGE)
- br3wlan -> WLAN (BLUE)
- br4off -> no network connection
Nur die interne Bridge (br0intern) wird direkt mit einer Netzwerkkarte (eth0) verbunden und mit einer IP-Adresse versehen.
Die XEN-Bridges (br2dmz, br3wlan) haben initial keine eigenen Verbindungen. Eine XEN-Bridge (br4off) bekommt nie eine Verbindung.
Die externe Bridge (br1extern) wird nur konfiguriert aber nicht gestartet, da die Firewall direkt eth2 verwendet und keine Bridge benötigt.
File: /etc/network/interfaces.d/xenbridges
# interfaces(5) file used by ifup(8) and ifdown(8)
# Included from /etc/network/interfaces
# ---------------------------------
# settings for all XEN bridges
# ---------------------------------
iface xenbridge inet manual
pre-up brctl addbr $IFACE
bridge_fd 0
bridge_stp off
bridge_hello 1
bridge_maxwait 0
bridge_waitport 0
post-up ip link set $IFACE promisc off
post-down brctl delbr $IFACE
# ---------------------------------
# br0intern
# eth0 -> intern, the internal lan
# 192.168.2.5
# ---------------------------------
iface br0intern inet static inherits xenbridge
address 192.168.2.5/24
gateway 192.168.2.12
bridge_ports eth0
# ---------------------------------
# br1extern
# eth1 -> extern, the internet/router
# not used (firewall uses physical device)
# ---------------------------------
iface br1extern inet manual inherits xenbridge
# bridge_ports eth1
# ---------------------------------
# br2dmz
# none -> dmz, firewall-zone only
# ---------------------------------
iface br2dmz inet manual inherits xenbridge
# ---------------------------------
# br3wlan
# wlan -> eth3 or firewall-zone
# ---------------------------------
iface br3wlan inet manual inherits xenbridge
# bridge_ports eth3
# ---------------------------------
# br4off
# none -> offline zone
# ---------------------------------
iface br4off inet manual inherits xenbridge
