XEN Bridges with Debian

Ich verwende die folgende Netzwerkkonfiguration mit XEN:

• br0intern -> internal LAN (GREEN)
• br1extern -> WAN (RED) -> not used !!
• br2dmz -> DMZ (ORANGE)
• br3wlan -> WLAN (BLUE)
• br4off -> no network connection

Nur die interne Bridge (br0intern) wird direkt mit einer Netzwerkkarte (eth0) verbunden und mit einer IP-Adresse versehen.

Die XEN-Bridges (br2dmz, br3wlan) haben initial keine eigenen Verbindungen. Eine XEN-Bridge (br4off) bekommt nie eine Verbindung.

Die externe Bridge (br1extern) wird nur konfiguriert aber nicht gestartet, da die Firewall direkt eth2 verwendet und keine Bridge benötigt.

File: /etc/network/interfaces.d/xenbridges

# interfaces(5) file used by ifup(8) and ifdown(8)
# Included from /etc/network/interfaces

# ---------------------------------
# settings for all XEN bridges
# ---------------------------------
iface xenbridge inet manual
        pre-up brctl addbr $IFACE
        bridge_fd 0
        bridge_stp off
        bridge_hello 1
        bridge_maxwait 0
        bridge_waitport 0
        post-up ip link set $IFACE promisc off
        post-down brctl delbr $IFACE

# ---------------------------------
# br0intern
# eth0 -> intern, the internal lan
# 192.168.2.5
# ---------------------------------
iface br0intern inet static inherits xenbridge
        address 192.168.2.5/24
        gateway 192.168.2.12
        bridge_ports eth0

# ---------------------------------
# br1extern
# eth1 -> extern, the internet/router
# not used (firewall uses physical device)
# ---------------------------------
iface br1extern inet manual inherits xenbridge
#        bridge_ports eth1

# ---------------------------------
# br2dmz
# none -> dmz, firewall-zone only
# ---------------------------------
iface br2dmz inet manual inherits xenbridge

# ---------------------------------
# br3wlan
# wlan -> eth3 or firewall-zone
# ---------------------------------
iface br3wlan inet manual inherits xenbridge
#        bridge_ports eth3

# ---------------------------------
# br4off
# none -> offline zone
# ---------------------------------
iface br4off inet manual inherits xenbridge