[Xen-users] nat via Dom0 using bridges doesn't work

To:	xen-users@xxxxxxxxxxxxxxxxxxx
Subject:	[Xen-users] nat via Dom0 using bridges doesn't work
From:	"Marco Sinhoreli" <msinhore@xxxxxxxxx>
Date:	Wed, 29 Nov 2006 21:13:20 -0200
Delivery-date:	Wed, 29 Nov 2006 15:13:34 -0800
Domainkey-signature:	a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=bL3QkzZjauZmYYAVfxVveBtTR8rS6N618M6r1s60q2cNYJVG7la+h6f9OWj15LtiIG+2pv+gJh03V+yrLq24hS5qUfVVWLkGmgYsble8cPWH+25TD84FrDE5GEsKVC9RQCQvhyTJ4zEEd+7HSsj7iDS/mKAUDr8rO6FJiJeSu+U=
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

Hello there,

please helpme! :-)

I have 3 phisical NICs on my machine configured to use network-bridge
script. This is my network designer:
                     ---------------------------------
                    -----------------------
                     |                                        |
                             |  Stations VLAN1  |
                     |                           eth1 <xenbr0> VLAN1
             /  -----------------------
INTRANET <xenbr0> eth0     DOM0            |                >- Switch -<
                     |                           eth2 <xenbr2> VLAN2
             \   -----------------------
                     |                                        |
                              |  Stations VLAN2  |
                     ---------------------------------
                     -----------------------

Well, I want enable nat via DOM0 for all Stations at VLAN1 and VLAN2
but I don't understand because this doesn't work.

ip_forward is enable and iptables nat for all IPs with output via eth0

echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

My Xen files:

------ xend-config.sxp
(network-script custom-network-bridge)
(vif-script vif-bridge)

------ scripts/custom-network-bridge
#!/bin/sh
XENDIR="/etc/xen/scripts"
$XENDIR/network-bridge-0 "$@"
$XENDIR/network-bridge-1 "$@"
$XENDIR/network-bridge-2 "$@"

------ variables in script/network-bridge-0
vifnum=0
bridge=${bridge:-xenbr${vifnum}}
netdev=eth0
antispoof=${antispoof:-no}

------ variables in script/network-bridge-1
vifnum=1
bridge=${bridge:-xenbr${vifnum}}
netdev=eth1
antispoof=${antispoof:-no}

------ variables in script/network-bridge-2
vifnum=2
bridge=${bridge:-xenbr${vifnum}}
netdev=eth2
antispoof=${antispoof:-no}

Any idea?

regards

--
Marco Sinhoreli
http://msinhore.blogspot.com

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users