From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 1E5441381F3 for ; Fri, 19 Jul 2013 08:19:27 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 59C34E0C3C; Fri, 19 Jul 2013 08:19:20 +0000 (UTC) Received: from mail-ie0-f173.google.com (mail-ie0-f173.google.com [209.85.223.173]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 177BFE0BF5 for ; Fri, 19 Jul 2013 08:19:18 +0000 (UTC) Received: by mail-ie0-f173.google.com with SMTP id k13so9060398iea.32 for ; Fri, 19 Jul 2013 01:19:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nileshgr.com; s=google; h=mime-version:date:message-id:subject:from:to:content-type; bh=k3tM+oYj2HoIdGMoxSRYywZu8zjoHyuS1sUSjhJTyr4=; b=ejYAeNtNOYuOyR2xGsKBtbjLghoSnDvDAAPo2+WinmY90imLWiU6JBE4ntfokgiRZE +CXDDA4WVigvP/syOcd4OI2tHO3EyqbmJS4sRXInLcwDJhuGcv/nkJO0mUhdlKYrwxrs KFt2OL1hGC6q6Try9doyCmvbeBRV6mx1/Uv8I= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type :x-gm-message-state; bh=k3tM+oYj2HoIdGMoxSRYywZu8zjoHyuS1sUSjhJTyr4=; b=i6cnt8xFP4LuVjnju4W4jxQIxoVW9BXClP2WJtBgsUPAeRz0NE485Y4dcFctQfIf7a 2WBW0GSIQtNfjmmEj4DuoaqUqjMKRrHuXFzjfjO+yXKBKydjTEJfMPW0Lo53XFdUfqi9 R3v7ciUGYv7pvuWPL3pxwSo6L+SoiJhl68DBB/VXzm4Qe4xyne1s7i6Aftxlzx2u11mF 4yNH3bu3rf8RjR2ob8WNrh7KW8r3/T2r8c2vt6RYsdcnwnY6reN8uzVwhLf/azfbwBoc mD91nwiyNf4C7nOyBjwKfZNqvT+Q+kSXmXc2n7kYFxxWJfPv1jojcYbCqI7PIIIHrK0h zVdQ== Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 X-Received: by 10.43.67.3 with SMTP id xs3mr9047437icb.45.1374221958193; Fri, 19 Jul 2013 01:19:18 -0700 (PDT) Received: by 10.64.14.48 with HTTP; Fri, 19 Jul 2013 01:19:17 -0700 (PDT) Received: by 10.64.14.48 with HTTP; Fri, 19 Jul 2013 01:19:17 -0700 (PDT) Date: Fri, 19 Jul 2013 13:49:17 +0530 Message-ID: Subject: [gentoo-user] Re: KVM networking help (solved) From: Nilesh Govindrajan To: Gentoo User Mailing List Content-Type: multipart/alternative; boundary=001a11c2162ea93baa04e1d8fb94 X-Gm-Message-State: ALoCoQlDi3I5bG0gKeEIEv/he73rjKWqbOAIrbS6KjKdALriemCY2wKh7AuhSKDCTINEzhItoSsK X-Archives-Salt: dc5c5d9c-347b-4bf5-8f06-9a1b2da2e07a X-Archives-Hash: 8b79cf458d378cbceea1436a844ab138 --001a11c2162ea93baa04e1d8fb94 Content-Type: text/plain; charset=UTF-8 On Jul 17, 2013 11:58 PM, "Nilesh Govindrajan" wrote: > > Hi, > > I need some help settling up networking with KVM machines. > > I have one public interface with four publicly accessible IPs. > > I want to run a private virtual network for the VMs, such that every VM can access every other VM and host, also host can access every VM (required for NAT). > > So far I tried this: > > Create two tap interfaces. > Add them to a bridge > Assign IP to bridge > Set different MACs for VMs' NICs. > > This let's me access one VM to another also VM to host (not sure about this, ping works). > But I'm not able to use host to VM (ping works), I'm not able to connect to sshd running inside VM from host. Alon, thanks a lot for the guide. It worked. Also was missing a iptables rule to allow bridging traffic. William, sounds interesting, will check it out later. PS: I was subscribed to digest and didn't get digest in more than 24h, so replying to my own message. --001a11c2162ea93baa04e1d8fb94 Content-Type: text/html; charset=UTF-8

On Jul 17, 2013 11:58 PM, "Nilesh Govindrajan" <me@nileshgr.com> wrote:
>
> Hi,
>
> I need some help settling up networking with KVM machines.
>
> I have one public interface with four publicly accessible IPs.
>
> I want to run a private virtual network for the VMs, such that every VM can access every other VM and host, also host can access every VM (required for NAT).
>
> So far I tried this:
>
> Create two tap interfaces.
> Add them to a bridge
> Assign IP to bridge
> Set different MACs for VMs' NICs.
>
> This let's me access one VM to another also VM to host (not sure about this, ping works).
> But I'm not able to use host to VM (ping works), I'm not able to connect to sshd running inside VM from host.

Alon, thanks a lot for the guide. It worked.
Also was missing a iptables rule to allow bridging traffic.

William, sounds interesting, will check it out later.

PS: I was subscribed to digest and didn't get digest in more than 24h, so replying to my own message.

--001a11c2162ea93baa04e1d8fb94--