I'm having a little trouble visualizing all of the steps that I need to take to get the desired network topology. Any help would be appreciated.
My desired topology is as follows:
LAN---| vm-mon |
| ________ |
eth0 veth0 veth1 vms |
| |_______| |
so we have a physical machine, vm-host, with two physical interfaces, wlan0 and eth0. wlan0 supplies a connection directly to vm-host, whereas eth0 is forwarded directly through br0 to vm-mon a virtual machine that monitors traffic as it proceeds to the virtual lan of virtual machines.
So the main points of discussion (assuming I am approaching it properly) are:
- configure br0 to forward all traffic between eth0 and veth0
- configure vm-mon to pass traffic between veth0 and veth1, after analyzing/filtering it (IDPS style)
- configuring a virtual lan for additional virtual machines. preferably on the same subnet as the physical lan
Thanks in advance for any and all comments.