資源描述:
《如何在xenserver中設(shè)置沒有默認(rèn)網(wǎng)關(guān)的ip》由會(huì)員上傳分享,免費(fèi)在線閱讀,更多相關(guān)內(nèi)容在工程資料-天天文庫。
1、HowtoSetupXenServerinaRoutedNetworkDocumentID:CTX121169??/??CreatedOn:2010-2-4??/??UpdatedOn:2010-2-4AverageRating:(2ratings)Viewproductsthisdocumentappliesto?SummaryInsomecases(suchashostingenvironments),multiplesubnetsofIPaddressesareprovidedonasingleint
2、erfacewheresubnetsotherthantheoriginalarenotassignedadefaultgateway.ThisconfigurationworkswhenanIPinterfaceexistswithinthesamesubnetasthedefaultgatewayfromtheprimarysubnet,howeverthisisnotalwayspossible.Thediagrambelowdepictsthisscenario:Inthiscase,ifaVMis
3、configuredwithinthe172.16.20.0/24subnet,thecustomer’sdefaultgateway(172.16.1.1)cannotbeusedandconnectivitytosubnetsotherthan172.16.20.0/24isnnotpossible.Wheneverpossible,youshouldconfigurethedefaultgatewayforthesecondarysubnetsassecondaryIPaddressesontheVL
4、AN.Thisactioncompletelyavoidstheneedforcomplexworkarounds.NoticeThisarticlemakeschangestotheXenServerconfigurationwhich,ifmadeimproperly,mightpreventnetworkaccesstothehostorcompromisesecurity.ThesechangesmightalsobeoverwrittenafterupdatesorupgradesbetweenX
5、enServerreleases.RequirementsOneormoreXenServerhostsconfiguredwithanexistingmanagementIPaddressinthesamesubnetasthedefaultgateway.Toimplementthisprocedure,itisassumedthatyouhavebasicLinux(suchaseditingfiles)andnetworkingknowledge.BackgroundXenServerisdesig
6、nedtoallowasingleIPaddresspermanagementinterface.Inaddition,XenServerdoesnotbydefaultfacilitateroutingbetweenIPinterfacesasthiscancompromisesystemsecurityifnotimplementedproperly.ForXenServertoworkeffectivelyinthistypeofenvironment,itmustbeconfiguredto:1.A
7、llowoneormoresecondaryIPaddressestobeconfiguredonagivenmanagementinterface.2.EnableforwardingbetweenIPinterfaces.3.Configurethein-builtIPTablesfirewalltoallowforwardingbetweentheprimaryandsecondarysubnets.Fromthesecondarysubnet,anIPaddressisdesignatedasthe
8、defaultgateway,whichisconfiguredontheXenServerhost.AllVMsusingthesecondarysubnet(s)routeexternalroutestotheXenServerDomain0.Thediagrambelowshowsthemodifiedbehavior:ProcedurePerformthefollowingstepstoconfigure