Comments on: Xen network configuration and multiple VLANs (II) http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/ A little bit of technology, security and networking with Linux, FreeBSD and Mac OS X, plus some personal opinions. Tue, 02 Feb 2010 09:15:52 -0700 http://wordpress.org/?v=2.9.2 hourly 1 By: Running Systems » Blog Archive » Xen guests cannot serve NFS requirests http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/comment-page-1/#comment-36861 Running Systems » Blog Archive » Xen guests cannot serve NFS requirests Tue, 03 Mar 2009 02:29:50 +0000 http://felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/#comment-36861 [...] was able to find the required hint in this post, under comment by Alejandro Anadon, and from there, directly to Xen’s FAQ site and to the  [...] [...] was able to find the required hint in this post, under comment by Alejandro Anadon, and from there, directly to Xen’s FAQ site and to the  [...]

]]> By: Antonio http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/comment-page-1/#comment-36627 Antonio Thu, 08 May 2008 23:26:07 +0000 http://felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/#comment-36627 Hi Felipe, I'm trying to implement a configuration like yours on a CentOS5.1 machine. But, I can't access the outside network (via a Cisco switch). I can ping Dom0 from DomU and isolate DomUs on different VLANs. I can access the network from Dom0 if I didn't start the bridge, but after that no. I can sniff the network traffic (all VLANs) when sniff the bridge, and can "see" the packets from/to the DomUs from/to the network, but they are lost at some point on the xen bridge. Can You helpme ? Thanks, Antonio Hi Felipe,

I’m trying to implement a configuration like yours on a CentOS5.1 machine. But, I can’t access the outside network (via a Cisco switch). I can ping Dom0 from DomU and isolate DomUs on different VLANs. I can access the network from Dom0 if I didn’t start the bridge, but after that no. I can sniff the network traffic (all VLANs) when sniff the bridge, and can “see” the packets from/to the DomUs from/to the network, but they are lost at some point on the xen bridge. Can You helpme ?

Thanks,

Antonio

]]> By: laurent http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/comment-page-1/#comment-35925 laurent Wed, 04 Jul 2007 17:36:39 +0000 http://felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/#comment-35925 Hi, With you configuration, is it possible to: sniff arp broadcast for eth0-DOM0 from eth0-DOMU? I want to disenabled that, and I can't solve it. I've tryed ebtable, but nothing! So I would like to try with VLAN Thanks. Laurent. Hi,
With you configuration, is it possible to:
sniff arp broadcast for eth0-DOM0
from eth0-DOMU?

I want to disenabled that, and I can’t solve it.
I’ve tryed ebtable, but nothing!
So I would like to try with VLAN

Thanks.

Laurent.

]]> By: alessio.mineni http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/comment-page-1/#comment-26369 alessio.mineni Wed, 20 Dec 2006 14:56:03 +0000 http://felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/#comment-26369 it work only with the mtu of the DomU vlan at 1492 ... but does not work fine. I can mount nfs partition but I can't browse it. it work only with the mtu of the DomU vlan at 1492 … but does not work fine. I can mount nfs partition but I can’t browse it.

]]> By: Felipe Alfaro Solana http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/comment-page-1/#comment-20410 Felipe Alfaro Solana Sat, 14 Oct 2006 04:21:24 +0000 http://felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/#comment-20410 With respect this subject on Xen and VLANs and Bonding, Sébastien CRAMATTE points me to the following Bug on XenSource's Bugzilla site: http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=753 In this Bug report, several users express their concerns on problems when trying to use Bonding and VLANs. I'm not completely sure of where the problem lies, but it could be possibly related to the Linux kernel itself. With respect this subject on Xen and VLANs and Bonding, Sébastien CRAMATTE points me to the following Bug on XenSource’s Bugzilla site:

http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=753

In this Bug report, several users express their concerns on problems when trying to use Bonding and VLANs. I’m not completely sure of where the problem lies, but it could be possibly related to the Linux kernel itself.

]]> By: Alejandro anadon http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/comment-page-1/#comment-17526 Alejandro anadon Sun, 10 Sep 2006 14:23:39 +0000 http://felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/#comment-17526 Nice document... but the original problem could be solved if you do: ethtool -K eth0 tx off in each machine (domain0 and domainU). It seems to be a bug of Xen. The problem of this, is that I am not sure if the checksum verification is done on each machine or not. see: http://wiki.xensource.com/xenwiki/XenFaq#head-4ce9767df34fe1c9cf4f85f7e07cb10110eae9b7 Nice document… but the original problem could be solved if you do:
ethtool -K eth0 tx off
in each machine (domain0 and domainU). It seems to be a bug of Xen. The problem of this, is that I am not sure if the checksum verification is done on each machine or not.
see:
http://wiki.xensource.com/xenwiki/XenFaq#head-4ce9767df34fe1c9cf4f85f7e07cb10110eae9b7

]]> By: Sébastien Cramatte http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/comment-page-1/#comment-15913 Sébastien Cramatte Mon, 28 Aug 2006 19:54:50 +0000 http://felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/#comment-15913 After many test ... bonding not works well ! It's very very slow or loose packet... So I've deciced to use only eth0 With you config I must force vlan interface mtu to 1496 in each domU. My e1000 are compatible with packets > 1500 but the virtual Xen network driver seems that not ... After many test …
bonding not works well !

It’s very very slow or loose packet…

So I’ve deciced to use only eth0

With you config I must force vlan interface mtu to 1496 in each domU. My e1000 are compatible with packets > 1500 but the virtual Xen network driver seems that not …

]]> By: Sébastien Cramatte http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/comment-page-1/#comment-15903 Sébastien Cramatte Mon, 28 Aug 2006 11:32:30 +0000 http://felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/#comment-15903 It seems that only one change is required in network-bridge script. You just need to enslave manualy a 2nd time. But be carefull, you must bring up "bond0" and enslave "eth0+eth1" correctly in your main network config. So after that, In you main xend-config.sxp you should have a line like this : (network-script my-network-bridge netdev=bond0) In the file "my-network-bridge" that is just a copy of the original "network-bridge" script you must add just after : ip set link ${pdev} up this line : ifenslave ${pdev} eth0 eth1 Seems that works for me with VLAN inside DOMU ... If anyone could test it ... It seems that only one change is required in network-bridge script.

You just need to enslave manualy
a 2nd time. But be carefull, you must bring up “bond0″ and enslave “eth0+eth1″ correctly in your main network config.

So after that, In you main xend-config.sxp you should have a line like this :

(network-script my-network-bridge netdev=bond0)

In the file “my-network-bridge” that is just a copy of the original “network-bridge” script you must add just after :

ip set link ${pdev} up

this line :

ifenslave ${pdev} eth0 eth1

Seems that works for me with VLAN inside DOMU …

If anyone could test it …

]]> By: Sébastien Cramatte http://www.felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/comment-page-1/#comment-15902 Sébastien Cramatte Mon, 28 Aug 2006 10:50:19 +0000 http://felipe-alfaro.org/blog/2006/08/21/xen-network-configuration-and-multiple-vlans-ii/#comment-15902 I've tested you configuration as this and works well. I'm trying to setup bond0 instead of eth0 but It's little bite more complicated. For example you can't enslave eth0+eth1 before run Xend because to rename an interface, this interface must be down. So you should enslave directly in network-bridge script ... I will post moredetails ASAP ! I’ve tested you configuration as this and works well.

I’m trying to setup bond0 instead of eth0 but It’s little bite more complicated. For example you can’t enslave eth0+eth1 before run Xend because to rename an interface, this interface must be down. So you should enslave directly in network-bridge script …

I will post moredetails ASAP !

]]>