Multiple Private vLAN on 1 NIC

[ejc317]

Hi guys,

I know for each individual NIC its tough to have different IP ranges with diffferent gateways. However, how do I bind multiple private vLANs to 1 nic ie 10.10.1.x and 10.10.2.x

I bound it manually through vmbr1:1 and vmbr1:2 - but is there a more elegant way of doing this?

 

[mir]

Why not simply create a bridge for each network?

auto eth0
iface eth0 inet manual

auto vmbr1
iface vmbr1 inet static
address 10.10.1.1
network 10.10.1.0
netmask 255.255.255.0
bridge_ports eth0
bridge_stp off
bridge_fd 0


auto vmbr2
iface vmbr2 inet static
address 10.10.2.1
network 10.10.2.0
netmask 255.255.255.0
bridge_ports eth0
bridge_stp off
bridge_fd 0

The simply assign the nics on the VM's to either bridge and give the bridge IP as default gateway. Of course you will need some kind of router routing the each network if you want to be able to access the internet from the VM's

 

[ejc317]

Did that - it doesn't work. Internet is not an issue since I have VMBR0 as the public VLAN and VMBR1 and VMBR2 as eth1 and eth2

VMBR3 and VMBR4 are both bound to eth3 with the ips 10.10.3.x and 10.10.4.x

The 10.10.3.x works but not 4.x ... I presume you can't bind 2 diff subnets to the same physical ethernet device?

Now I can bind 10.10.4.x to VMBR3:1 and the reason that works is that the vlans are not separate (we don't have separate vlans for each of the .3.x and .4.x) so there's no tagged traffic