0

Does anyone know how to redirect IP packets from a GZ interface to a NGZ?

I think this may be due to virtual (multiple) MAC addresses per NIC interacting with VMWare and VirtualBox and there is a potential solution below involved in placing the Host NIC (through VMWare or VirtualBox in promiscuous mode) including the Gust OS NIC. Unsure if it's the best solution.

The GZ is on interface net0 (phys) 192.168.0.10 and NGZ on zone/net0 (vnic) 192.168.0.11. I'm trying to bring up a DNS server in the NGZ at 192.168.0.11. So far, I can use the packet filter / firewall to redirect DNS ports (NGZ won't allow me to use privileged ports) to the GZ for testing. I have NAT working using pass in on net0 from 192.168.0.11 to any nat-to (net0), however I still can't get traffic from the 192.168.0.0/24 subnet through physical net0 to route to the NGZ at 192.168.0.11.

FYI -- I'm using VMWare on a Mac and it created a bridge for the 192.168.0.0/24 subnet.

1 Answer 1

1

Solved!

Log into GZ:

# dladm create-bridge bridge # dladm create-etherstub switch0 # dladm set-linkprop -p mtu=1500 switch0 # dladm add-bridge -l switch0 bridge # dladm add-bridge -l net0 bridge # dladm create-vnic -l net0 vnet0 # dladm create-vnic -l net0 vnet1 

In VMware Fusion: "modify the virtual machine's configuration file (.vmx). Specifically, you need to add 'ethernet[#].noPromisc = "FALSE"' for each network adapter you want in promiscuous mode, replacing [#] with the adapter number"

Some background:

Whenever you create two or more VNICs on the same physical port, a virtual switch will be created at the MAC layer.

The effect of the creation of the virtual switch is that traffic between those VNICs is switched at the MAC layer. It does not need to leave via the physical NIC to be switched by some external piece of hardware. As long as the VNICs share the same physical NIC, and are on the same VLAN, this MAC layer virtual switch can be employed.

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.