I'm fighting with the following problem.

  • I got an Hetzner dedicated Server with multiple additional IPs which I want to use for KVM VMs. (MainIP =, First additional IP:
  • Before my server was running Ubuntu 16.04 and acts as a router for the VMs. So every VM had its own public IPv4 and the gateway was the host itself. This was working very well!

I followed this:



How can I do that with Fedora 32 using Firewalld, Nftables and NetworkManager enabled?
I tried following the guide and adapting the commands for Fedora. At the moment I got one VM running on br0 Host-Device.

KVM-Diagram 1

KVM-Diagram 1

KVM-Diagram 2

KVM-Diagram 2

  • 1
    Go to the first link and skip most everything and go directly to «3 Zusätzliche IP-Adressen (Virtualisierung)». Use the «Routed (brouter)» instructions. There are several other ways to do this, including ones not listed in the Hetzner wiki, but this is the easiest and doesn't break IPv6. The configuration you describe having before corresponds to the «Bridged» section, so you could do that as well. But you have to get MAC addresses out of the Robot to use. I don't use or recommend it because it breaks IPv6 for the VMs, and since it's the 21st century, everyone needs to be using IPv6. Jul 9, 2020 at 16:14
  • Hi, yes i tried following this part but it did not work, even if i have systemctl stop firewalld... any other ideas? I attached two screenshots which shows my setup. Jul 9, 2020 at 16:42
  • i think i got it working now. but can i also add multiple bridges with the same host ip? Jul 9, 2020 at 20:13
  • You only need one bridge. All the VMs can use it. Jul 9, 2020 at 20:21
  • Okay,got it thank you! But is it also possible to have an bridge for every KVM? SO i can create separate firewall zones Jul 9, 2020 at 20:30


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy