Tag Info

Hot answers tagged

3

Check that your VMs have ip addresses on 10.x.x.x/24 (netmask 255.255.255.0) Set 10.x.x.11 (br0 ip address) as the default gateway of your VMs Enable ip forwarding on the physical host Enable SNAT with: iptables -t nat -A POSTROUTING -s 10.x.x.x/24 -o eth1 -j SNAT --to y.y.y.102


3

How would one achieve this functionality? vSwitches are just that, a switch, and nothing else, if you had a physical switch how would you expect it to do this? You wouldn't, you'd probably do it via round-robin DNS or an external load-balancer. Does the solution lie within the VM (pfsense) or at the ESXI networking level? How about within the ...


2

Define the bridge interface with eth0 as port Set the IP address on the bridge interface You will need the bridge-utils package installed (most likely is already there). Here's how you would configure this in /etc/network/interfaces. Restart the network service (or reboot the machine) auto lo iface lo inet loopback auto eth0 iface eth0 inet manual ...


1

iptables -t nat -I POSTROUTING -s 10.x.x.x/24 ! -d 10.x.x.x/24 -j SNAT --to-source y.y.y.102 this must be changed to iptables -t nat -I POSTROUTING --out-interface eth1 -j SNAT --to-source y.y.y.102 According to your first rule, only packages with destination to 10.x.x.x must be processed. So, what about traffic from outside to your network? (source ...


1

Are there any side effects or problems that could come of placing a modem into bridge mode in order to allow for easier access to internal services? Well, that's probably something you should talk with your ISP about. In general, though, it's a great idea. Double-NAT is evil.


1

Ideally (ie pedantically) speaking, your modem is always be in bridge mode, but many "modems" also have a router built in to handle NAT etc for you. It's also common enough to have that handled in a separate device, leaving the modem to do what it does best. As you've mentioned double natting, I'm assuming you have a dedicated router. I'm also going to ...


1

You need to remove IP address configuration from eth0, add eth0 to the bridge and then configure IP address on the br0 interface.



Only top voted, non community-wiki answers of a minimum length are eligible