I’m trying to do a #FreeBSD vnet jail using a different subnet than the host. Routing seems to be the issue. I think the host needs an IP address in the jails subnet to act as the gateway. Correct?
The vnet needs to be attached to **not** em0.
The vnet needs to be attached to **not** em0.
I thought about creating tap0, putting 192.168.0.1 on that, and attaching it to bridge0 instead of em0.
We created em1 on the host, configured as: ifconfig em1 inet 192.168.100.1/24
The host can now ping the jail, and the jail can ping the host.
The problem: we can't do NAT.
tcpdump shows no traffic on em1 leaving the jail.
Is that because bridge0 members are em0, em1, vnet0 ?
The host can now ping the jail, and the jail can ping the host.
The problem: we can't do NAT.
tcpdump shows no traffic on em1 leaving the jail.
Is that because bridge0 members are em0, em1, vnet0 ?
e.g. host google.com in the jail produces traffic on em0 and vnet0... we just don't know how/where to do the NAT in this case.
I think my original assertion that bridge0 be not connected to em0 is wrong. However, this is iocage, and it is somehow associating everything with bridge0.
Let's try vanilla jails.
Let's try vanilla jails.
