My network administrators don't like when I plug switch into the building network to fan-out to multiple computers. They want single link drop per physical NIC. Previously the blocked those MACs on the switch in automatic fashion. I understand that good network topology is as linear as possible, without extensive branching. But now I want to use FreeBSD jails.
If I run one (or several) jails in FreeBSD, I realistically have 3 NICs on the same port in the wall:
- host's physical NIC, something like
- host's part of paired virtual interfaces, connected back-to-back,
- jail's part of (2),
All of these interfaces have to be registered in order to get IP from DCHP server. Will that setup cause trouble, and why? Is it correct that there is no way I can connect my jail (though some pass-through interface?) directly to "the wall"?