[PVE-User] about pve-firewall pending changes

lyt_yudi lyt_yudi at icloud.com
Sat Aug 2 16:58:32 CEST 2014

在 2014年8月2日,下午10:10,Alexandre DERUMIER <aderumier at odiso.com> 写道:

> ok, I'll test that monday.
> can you also do
> #pve-firewall compile
> and send me the result ?

yes,link this:


for vms details
host1: vm100 & vm103
# cat 100.conf 
bootdisk: virtio0
cores: 2
cpuunits: 10000
hotplug: 1
ide0: none,media=cdrom
memory: 2048
name: test01
net0: virtio=66:E7:FB:09:A4:62,bridge=vmbr0
net1: virtio=1E:45:F9:26:C3:1B,bridge=vmbr0
net2: virtio=DE:43:22:98:71:26,bridge=vmbr1,firewall=1
onboot: 1
ostype: l26
sockets: 1
virtio0: local:254/vm-254-disk-1.raw,format=raw,size=16G

# cat 103.conf 
balloon: 4096
bootdisk: virtio0
cores: 8
cpuunits: 150000
hotplug: 1
ide0: none,media=cdrom
memory: 8192
name: test02
net0: virtio=CE:84:EF:85:3E:74,bridge=vmbr0
net1: virtio=EA:6A:D2:BA:31:3C,bridge=vmbr1,firewall=1
onboot: 1
ostype: l26
sockets: 1
virtio0: local:103/vm-103-disk-1.raw,format=raw,size=32G

# cat /etc/network/interfaces 
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet manual

auto eth1
iface eth1 inet manual

auto eth2
iface eth2 inet manual

auto eth3
iface eth3 inet manual

auto bond0
iface bond0 inet manual
        slaves eth1 eth2 eth3
        bond_miimon 100
        bond_mode balance-tlb

auto vmbr0
iface vmbr0 inet static
        address 10.0.x.x
        gateway 10.0.x.x
        bridge_ports eth0
        bridge_stp off
        bridge_fd 0
        post-up echo 0 > /sys/devices/virtual/net/vmbr0/bridge/multicast_snooping

auto vmbr1
iface vmbr1 inet manual
        bridge_ports bond0
        bridge_stp off
        bridge_fd 0
	post-up echo 0 > /sys/devices/virtual/net/vmbr1/bridge/multicast_snooping

Thanks, wish you have a nice weekend! :) 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.proxmox.com/pipermail/pve-user/attachments/20140802/4869a74a/attachment.htm>

More information about the pve-user mailing list