[Xen-users] dom0 networking

[Paolo Supino <paolo@xxxxxxxxxxxxx>]

Hi

 I have a bit of a problem that I have to overcome. I have 2 networks 
that I need to run different system on (DMZ and internal). I have one 
computer that has two NICs and I thought of doing the following: Setup 
Xen and run dom0 without giving it an IP address. Setup one domU that is 
bridged through the first NIC and a second domU that is bridge through a 
second bridge on the second interface. The result of this setup is that 
I have 2 domUs that are totally separated even on the network level and 
dom0 that is unreachable because it doesn't exist in layer 3 and above.
The questions I have:
1. Is it possible not to give dom0 an IP address at all and still have 
the domU be able to network?
2. Is such a setup has a security weakness that I'm not seeing?




TIA
Paolo


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users