<div dir="ltr"><div><div><div><div><div><div><div><div>Hi Dan,<br><br></div>OK, thanks this is something I need to look into.<br><br></div>What would be another way to accomplish this ? Create two networks for these nics and VM ?<br>
<br></div>The issue is that when I add a Nic to a host on 3.2 I need to set an IP. When I don't set it or at least set it to DHCP I get an error that there IP is not set right, I also see this in the logs.<br><br></div>
Is that part still a bug ?<br><br></div>I get the feeling that it's the way at the moment, or almost, that the Nics needs an IP, but why ? For an example this is not needed on ESXi, the Virtual Nic can be bridged to a VM without any settings on the host.<br>
<br></div>Thanks so far.<br><br></div>Cheers,<br><br></div>Matt<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">2013/2/10 Dan Kenigsberg <span dir="ltr"><<a href="mailto:danken@redhat.com" target="_blank">danken@redhat.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On Sun, Feb 10, 2013 at 12:19:57PM +0100, Matt . wrote:<br>
> Hi,<br>
><br>
> For setting up a firewall in a VM I would like to add 2 of my 4 nics<br>
> directly to a VM.<br>
><br>
> In my previous setup I thought I have done that, but at the moment I cannot<br>
> figure this out and cannot find the docs to accomplish this.<br>
><br>
> I would like to dedicate those 2 nics to my firewall VM's to avoid sharing<br>
> them using a network per accident to other VM's.<br>
><br>
> How is this be done at the moment ?<br>
<br>
</div></div>AFAIK it can be done only with a vdsm hook. You'd need to define your VM<br>
with no interface at all, but instead, mark it with a special custom<br>
property you define. Then, you should write a hook that adds the two<br>
host interfaces to the VM, by means of either<br>
<a href="http://libvirt.org/formatdomain.html#elementsNICSDirect" target="_blank">http://libvirt.org/formatdomain.html#elementsNICSDirect</a> or<br>
<a href="http://libvirt.org/formatdomain.html#elementsNICSHostdev" target="_blank">http://libvirt.org/formatdomain.html#elementsNICSHostdev</a><br>
<br>
Most probably, you would need to pin your firewall VM to a specific<br>
host.<br>
<br>
Writing a hook is not too complex, but it requires understanding of how<br>
vdsm and libvirt works. You can take<br>
<a href="http://gerrit.ovirt.org/gitweb?p=vdsm.git;a=tree;f=vdsm_hooks/vmfex" target="_blank">http://gerrit.ovirt.org/gitweb?p=vdsm.git;a=tree;f=vdsm_hooks/vmfex</a> as a<br>
reference, or ask for specific guidance here.<br>
<span class="HOEnZb"><font color="#888888"><br>
Dan.<br>
</font></span></blockquote></div><br></div>