[pve-devel] ovs masqueraded bridge

[Alexandre DERUMIER]

>>works without problems here. 

That's a great new ! :)

So, what doesn't work with iptables and openvswitch ? layer2 filtering only?
----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: pve-devel at pve.proxmox.com 
Envoyé: Jeudi 19 Décembre 2013 12:22:04 
Objet: [pve-devel] ovs masqueraded bridge 

Seems that a simple masqueraded setup is possible: 

-------------- 
auto vmbr1 
allow-ovs vmbr1 
iface vmbr1 inet static 
address 10.3.2.1 
netmask 255.255.255.0 
ovs_type OVSBridge 
post-up echo 1 > /proc/sys/net/ipv4/ip_forward 
post-up iptables -t nat -A POSTROUTING -s '10.3.2.0/24' -o vmbr0 -j MASQUERADE 
post-down iptables -t nat -D POSTROUTING -s '10.3.2.0/24' -o vmbr0 -j MASQUERADE 

-------------- 

works without problems here. 

_______________________________________________ 
pve-devel mailing list 
pve-devel at pve.proxmox.com 
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel