
Good day. yes the VMs and the firewall on the same L2 network also the firewall is hosted in oVirt along side the VMs, currently there is no external switch connected to the nic and i would like to know if it is possible to pass tag internally. On Fri, Aug 23, 2019 at 9:21 PM Tony Pearce <tonyppe@gmail.com> wrote:
Have the VM and the firewall on the same L2 network. Configure the VM with a default gateway of the interface of the firewall.
Is it what you're looking for?
On Fri., 23 Aug. 2019, 21:15 Ernest Clyde Chua, < ernestclydeachua@gmail.com> wrote:
Good day. sorry if i got you guys confused. for clarity:
i have a server with two nic, currently one nic is connected to public network and the other one is disconnected.
And i have a vm that will be the firewall of other vm inside this standalone/selfhosted ovirt.
then i am figuring out how can i pass the vlan ids on the vm or is it possible.
On Fri, 23 Aug 2019, 7:46 PM Dominik Holler <dholler@redhat.com> wrote:
On Thu, Aug 22, 2019 at 1:18 PM Miguel Duarte de Mora Barroso < mdbarroso@redhat.com> wrote:
On Wed, Aug 21, 2019 at 9:18 AM <ernestclydeachua@gmail.com> wrote:
good day currently i am testing oVirt on a single box and setup some tagged
vms and non tagged vm.
the non tagged vm is a firewall but it has limitations on the number of nic so i cannot attach tagged vnic and wish to handdle vlan tagging on it
is it possible to pass untaged franes internally?
I think it would fallback to the linux bridge default configuration, which internally tags untagged frames with vlanID 1, and untags them when exiting the port. Unless I'm wrong (for instance, we change the bridge defaults), this means you can pass untagged frames through the bridge.
Adding Edward, to keep me honest.
I am unsure if I got the problem. If you connect an untagged logical network to a vNIC (virtual NIC of a VM), all untagged Ethernet frames will be forwarded from the host interface (physical NIC or bond). If no tagged logical network is attached to this host interface, VLAN tag filtering is not activated and even tagged Frames would be forwarded to the vNC.
Does this answer the question?
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/HYFSLS5QM5DKBY...
Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ME77W5PLKOQC5U...
_______________________________________________
Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/UE3XZWUU5UMT4P...