[PVE-User] more subnet on same bridge

[Flavio Stanchina]

Marco Vaschetto wrote:
> anybody have try to configure different subnet on the same bridge
> between two node?
>
> For example,
>
> on the two server node vmbr1 is setup without any ip and is working
>
> VM 1 - IP 192.168.0.1 - server node A
> VM2 - IP 192.168.0.2 - server node B
> VM3 - IP 172.16.0.1 - server node A
> VM4 - IP 172.16.0.2 - server node B
>
> All VM's the virtual ETH setup with on vmbr1.
>
> I think this will work fine, [...]

Should work just fine if the rest of your network is properly set up, 
but it's not very useful because the node administrator(s) -- or a bad 
guy that breaks into the node(s) -- can easily reconfigure the network 
interfaces as they please. If you're doing this to partition the network 
for security reasons, set up another vmbr interface on a separate VLAN.

-- 
Flavio Stanchina
Informatica e Servizi
Trento - Italy