SDN VLAN zone

[UtilisateurCXS]

Here is my configuration, and I would like to understand why, because I thought that thanks to the vnet, the two VMs on the two vnets would not be able to ping each other, but they can.


Vmbr1 -> portX (trunk vlan 10 and 20)


First, you must have a bridge without vlan tagging:



Then create a VLAN-type zone:








Create the vnets with tags corresponding to your VLANs on your switch that are tagged:


I also tried to configure a rule, but I still get the same result:

 

[Nemesiz]

Can you show VM network configuration ?

 

[UtilisateurCXS]

 

[UtilisateurCXS]

I would also like to know when to use the vnet firewall, because if isolation requires using the firewall above, the node firewall, then SDN is not very useful, is it?

 

[Nemesiz]

Try to enable "VLAN Aware"

 

[UtilisateurCXS]

This :



Or this :

 

[Nemesiz]

VNet. Personally I`m not sure but lets try.