how to do interval jail ips

Artem Kuchin artem at artem.ru
Mon Apr 6 15:38:50 UTC 2015


06.04.2015 18:25, Matthew Seaman пишет:
> On 06/04/2015 15:53, Artem Kuchin wrote:
>> 06.04.2015 17:46, Ernie Luzar пишет:
>>> Artem Kuchin wrote:
>>>> Hello!
>>>>
>>>> I have several jails and some of the use real ips, some are just
>>>> internal for the server like 10.0.0.x
>>>> However, i assigned all ips to the external em0 interface.
>>>> This causes problems, because of server in the same lan have 10.0.0.x
>>>> address of their interfaces too.
>>>> So, there is a conflict.
>>>> This is just a colocation, so, i cannot control the ip assignment.
>>>>
>>>> What is the correct way to assign ip address which are seen only
>>>> withing a host?
>>>> (some kind of virtual NIC)
>>>>
>>>> Artem
>>>>
>>> xl0,10.0.10.2   for lan on device xl0
>>>
>>> em0,x.x.x.x   for rl0 device facing pubic internet
>>>
>>> use the correct device names for you network configuration
>>>
>> i don't get it. I do not have xl0 device
>> I only have em0
>> Or i can specify whatever device i like even if it is not installed in
>> the server?
> You can create jail IPs bound to the loopback interface lo0 exactly as
> you would for a standard NIC.

Need a little clarification. Do you mean i need to specify ip aliases 
on  lo0 interfaces
in rc.conf and then specify that ip in jail conf??

> Be aware though that if you assign your internal IPs from, say,
> 10.11.0.0/24 that will mean you would have trouble reaching anything on
> that particular subnet via your network interface.
This is understood. It is a colocation server. No need to access 
anything localy. VPN
is also not up.



More information about the freebsd-questions mailing list