Network Configuration with Jails.

[Félix Langelier]

Hello,

I run a FreeBSD Jailer and I want to have multiple jails in 2 seperate networks. The server has 2 network interfaces and each of them are connected in a different network. Say vlan1 and vlan2.

My problem is that all the network traffic is going through the first interface (vlan1). What I need is that a jail in vlan1 can't communicate with a jail in vlan2 (and vice-versa).

Is it possible to split the network traffic in the right interfaces and use a diffrent default gateway for each of them ?

Here is my /etc/rc.d configuration.

defaultrouter="192.168.1.1"

static_routes="vlan1 vlan2"
route_vlan1="-net 192.168.1.0/24 192.168.1.1"
route_vlan2="-net 192.168.2.0/24 192.168.2.1"

# vlan1 interface config.
ifconfig_bge0="inet 192.168.1.10 netmask 255.255.255.0"
ifconfig_bge0_alias0="192.168.1.11 netmask 255.255.255.255"

# vlan2 interface config.
ifconfig_bge1="inet 192.168.2.10 netmask 255.255.255.0"
ifconfig_bge1_alias0="inet 192.168.2.11 netmask 255.255.255.255"
 
I tried to remove the default gateway but then the server was unreachable.
I am thinking of using pf to resolve my issue. 

Any suggestions or ideas ?

Thanks in advance for your help.

--
Felix Langelier
Unix Sysadmin
felix.langelier at notarius.com