<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Mon, Oct 30, 2017 at 10:50 AM, Alona Kaplan <span dir="ltr"><<a href="mailto:alkaplan@redhat.com" target="_blank">alkaplan@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div>Hi Istvan,<br><br></div>I agree with Luca. You can remove nic1.<br>'ovirtmgmt' network is not mandatory on the vm, you can run the vm with no vnics (vitrual nics) at all.<br></div>The 'ovirtmgmt' network is used for communication between the engine and the host.<br></div>Whether the vm using the 'ovirtmgmt' network or not won't affect the management capabilities.<br><br></div>You said that the vm nic with 'ovirtmgmt' was automatically added when you added the vm.<br></div>It is strange and shouldn't behave this way. Are you sure that in the add vm dialog you didn't choose it as the network of nic1? (you could leave this section in the dialog unfilled, it is not mandatory).<br><br></div>BTW, if you don't want any VM to use the 'ovirtmgmt' network you can go to the edit network dialog of 'ovirtmgmt' (in the Network main tab) and uncheck the 'vm network' checkbox.<br><div><div><div><br></div><div>Hope it helps you,<br></div><div>Alona.<br></div></div></div></div><div class="gmail_extra"><br></div></blockquote><div><br></div><div>Hi Alona,</div><div><br></div><div>Yes, removing nic1 was the solution I was looking for.</div><div><br></div><div>You are right, I probably added nic1 during the creation of the VM. This is my first ovirt install and I'm a little bit overwhelmed by all the details one has to know to create a system that is reliable and efficient.</div><div>Fortunately, thanks to people like you and Luca, I'll be able to overcome the initial difficulties.</div><div><br></div><div><br></div><div>Istvan</div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_extra"><div class="gmail_quote"><div><div class="h5">On Mon, Oct 30, 2017 at 11:26 AM, Luca 'remix_tj' Lorenzetto <span dir="ltr"><<a href="mailto:lorenzetto.luca@gmail.com" target="_blank">lorenzetto.luca@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5"><span>On Mon, Oct 30, 2017 at 8:45 AM, Istvan Buki <<a href="mailto:buki.istvan@gmail.com" target="_blank">buki.istvan@gmail.com</a>> wrote:<br>
> Hello,<br>
><br>
> thank you for your patience for trying to let me see the light.<br>
><br>
> Indeed I don't understand what you are explaining. Maybe if I give you more<br>
> concrete details it will help.<br>
><br>
> My internal network is 192.168.196.0<br>
> My DMZ network is 192.168.188.0<br>
><br>
> ovirt-engine is running on a centos server with IP 192.168.186.3<br>
> ovirt host is on a centos server with IP 192.168.186.4<br>
><br>
> On the host I created a VM that I want to be in the DMZ. When I created the<br>
> VM, nic 1 was automatically added and is linked to the ovirtmgmt network.<br>
> In the VM nic1 becomes eth0 and was assigned an IP address with DHCP<br>
> 192.168.186.167.<br>
><br>
> After that I added a host device to that VM using passthrough. This device<br>
> is called ens7 in the VM and I gave IP 192.186.188.4.<br>
> That device is directly connected to my physical DMZ switch and from there<br>
> to the firewall.<br>
> This part is OK.<br>
><br>
> My problem is that through eth0 my VM has access to my internal network.<br>
> Removing the device seems impossible because this is ovirtmgmt network.<br>
> I can not change or remove the IP of my host because it would not be<br>
> reachable anymore on my internal network.<br>
><br>
> Maybe the solution is obvious but I can't see it. I'm running in circle with<br>
> this problem and it makes me crazy.<br>
><br>
<br>
<br>
<br>
</span>Hi Istvan,<br>
<br>
why are you using device passthrough?<br>
<br>
Anyway. If you don't need the VM to access to ovirtmgmt, remove nic1.<br>
As far as i can understand, you're directly communicating through DMZ.<br>
<span class="m_2683951621548809198HOEnZb"><font color="#888888"><br>
Luca<br>
<br>
<br>
--<br>
"E' assurdo impiegare gli uomini di intelligenza eccellente per fare<br>
calcoli che potrebbero essere affidati a chiunque se si usassero delle<br>
macchine"<br>
Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)<br>
<br>
"Internet è la più grande biblioteca del mondo.<br>
Ma il problema è che i libri sono tutti sparsi sul pavimento"<br>
John Allen Paulos, Matematico (1945-vivente)<br>
<br>
Luca 'remix_tj' Lorenzetto, <a href="http://www.remixtj.net" rel="noreferrer" target="_blank">http://www.remixtj.net</a> , <<a href="mailto:lorenzetto.luca@gmail.com" target="_blank">lorenzetto.luca@gmail.com</a>><br>
</font></span></div></div><span class=""><div class="m_2683951621548809198HOEnZb"><div class="m_2683951621548809198h5">______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman<wbr>/listinfo/users</a><br>
</div></div></span></blockquote></div><br></div>
</blockquote></div><br></div></div>