On 4/6/14, 5:04 PM, Chris Smith wrote:
On 06/04/14 04:20, Julian Elischer wrote:
On 4/5/14, 10:22 AM, Chris Smith wrote:
Hi All,
I have a system with 1 network interface with 2 extra VLANs off it
and I'm having some trouble getting the routing working correctly
with it and jails.
bge0 - management - 10.71.100.0/24
bge0.101 - LAN - 10.71.101.0/24
bge0.103 - DMZ - 10.71.101.0/24
Here's what I want to achieve...
Host:
I want the host system to only listen on one interface, bge0. I
want NO ip addresses of the host on the vlan interfaces. The only
service it will be exposing is its sshd. The management address
for this system is 10.71.100.50.
Sounds to me that you want to use vimage jails.
check the vnet command to jail .
Hey Julian,
Thanks for that. I did come across it but all of the documentation I
found indicated that it was experimental.
After a day or so messing around with VIMAGE/vnet and their various
gotchas and interactions with jails on FreeBSD 10, I have something
working that I'm happy with.
as long as you steer clear of pf and do only 'vanilla' stuff, you
should be ok.
let us know what you think and I'd like to see your notes published,
if not officially then at least put here so that others can find it in
the archives.
I've made a bunch of notes so I hope to write something up for it
since most of the documentation around this is thin, old or outdated.
Cheers,
Chris.
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
