what i have
- one host
- with 3 public ip adresses
- 1 nic (connected to the WAN)
ips:
xxx.xxx.xxx.xx1
xxx.xxx.xxx.xx2
xxx.xxx.xxx.xx3
my goal is to have
- a running kvm on the host
- a secure host which is listening on xxx.xxx.xxx.xx1 for ssh for specific ips
- one virtual machine acting as router and dhcp server which is listening to xxx.xxx.xxx.xx2 and xxx.xxx.xxx.xx3, having 2 virtual interfaces (as far as i understood, the first interface is directly bridged with eth0 and the 2nd interface is a tap interface.
- green zone (192.168.20.0): multiple other virtual machines only connected to the routing vm with internet access and the possibility to access each other. as far as i understand all virtual machines have one tab interface.
for securing the host i thought about shorewall (allready used the firewall for non kvm setups), as router i would like to use pfsense (really like the gui for managing openvpn and ip aliases)
questions
- how to setup this virtual network?
- where to find good documentation/howtos for that problem?
- which virtual devices do i need for my router and how to create them?
- inputs how to realize this problem even better?
- any errors i made in my assumptions?
(i am used to vmware, where i just "click my virtual network together")
