I'm using debian 10 with kvm/qemu as hypervisor. You can ignore the bond...
I created X VLAN Tagged and created a bridge on that tagged vlan.
auto bond0 iface bond0 inet manual slaves eno1 eno2 bond-mode 4 auto bond0.10 iface bond0.10 inet manual vlan-raw-device bond0 auto br10 iface br10 inet static address 192.168.10.2 gateway 192.168.10.1 netmask 255.255.255.0 bridge_ports bond0.10 bridge_stp off
The problem is now, that through this "design", the guest cannot access the host... What would be an better design? I want to have following design
Gatway 192.168.10.1 - Host - Guest 192.168.10.10
So there is no way the guest can access to host.
Currently its like:
Gatway 192.168.10.1 - Host 192.168.10.2 - Guest 192.168.10.10
Is there a "better" thing as only to deny via firewall?
vSwitch an idea?