Dan,
I knew that something didn't quite make sense when I tried this earlier today.
I'm glad that I set this up on my home lab, because I got it working using the advice
that you folks provided. Now that I know that this is a viable solution, I can go back
and start learning this correctly, from the beginning.
Thank you :)
Richard Seguin
-----Original Message-----
From: "Dan Kenigsberg" <danken(a)redhat.com>
Sent: Tuesday, April 29, 2014 7:01pm
To: richard.seguin(a)marisec.ca
Cc: awels(a)redhat.com, users(a)ovirt.org
Subject: Re: [ovirt-users] IP forwarding... Cannot access guest IP
On Tue, Apr 29, 2014 at 05:11:57PM -0400, richard.seguin(a)marisec.ca wrote:
All of the other hypervisors that I am reading about allows for
promiscuous mode to be turned on at the host level... Do we have anything like that?
Would you confirm that once you have set macspoof=true, libvirt's domxml
for the relevant VM has lost its <filterref> element? (virsh -r dumpxml
would verify that)
This should allow you to ping out of the Xen guest outside of the KVM
host. If it doesn't, we'd have to debug this to understand what drops
your packets.
I'm not quite sure what you mean by "promiscuous mode". What VMWare
calls promiscuous mode is not unlike oVirt's port mirroring, but I'm not
convinced that this is what you are looking for.
Dan.