Multihomed system with jails routing issues

[Julian Elischer]

On 4/6/14, 5:04 PM, Chris Smith wrote:
> On 06/04/14 04:20, Julian Elischer wrote:
>> On 4/5/14, 10:22 AM, Chris Smith wrote:
>>> Hi All,
>>>
>>> I have a system with 1 network interface with 2 extra VLANs off it 
>>> and I'm having some trouble getting the routing working correctly 
>>> with it and jails.
>>>
>>> bge0     - management - 10.71.100.0/24
>>> bge0.101 - LAN        - 10.71.101.0/24
>>> bge0.103 - DMZ        - 10.71.101.0/24
>>>
>>> Here's what I want to achieve...
>>>
>>> Host:
>>> I want the host system to only listen on one interface, bge0. I 
>>> want NO ip addresses of the host on the vlan interfaces. The only 
>>> service it will be exposing is its sshd. The management address 
>>> for this system is 10.71.100.50.
>>>
>> Sounds to me that you want to use vimage jails.
>> check the vnet command to jail .
>>
> Hey Julian,
>
> Thanks for that. I did come across it but all of the documentation I 
> found indicated that it was experimental.
>
> After a day or so messing around with VIMAGE/vnet and their various 
> gotchas and interactions with jails on FreeBSD 10, I have something 
> working that I'm happy with.

as long as you steer clear of pf and do only 'vanilla' stuff, you 
should be ok.
let us know what you think and I'd like to see your notes published, 
if not officially then at least put here so that others can find it in 
the archives.

>
> I've made a bunch of notes so I hope to write something up for it 
> since most of the documentation around this is thin, old or outdated.
>
> Cheers,
> Chris.
> _______________________________________________
> freebsd-net at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>
>