Prevent IP Hijacking

[ejc317]

Hi there,

What is the best way to prevent your VMs from hijacking IPs of their neigbhors on the same hypervisor? We have 10GBE ports into each hypervisor and its unrealistic to set vlans on physical interfaces. What are my alternatives?

 

[mo_]

Not sure I understand your problem correctly, but: static IP configurations for anything and everything. always.

alternatively a semi-static setup with static MAC addresses where you assign static IP addresses via static MAC<->IP matches on your DHCP server

 

[spirit]

Hi there,

What is the best way to prevent your VMs from hijacking IPs of their neigbhors on the same hypervisor? We have 10GBE ports into each hypervisor and its unrealistic to set vlans on physical interfaces. What are my alternatives?

Hi,I'll be possible soon with coming pve-firewall. (prevent mac and ip spoofing)