OpenVZ Forum


Home » General » Support » openvpn and tap/bridging with a "dummy" network adapter?
Re: openvpn and tap/bridging with a "dummy" network adapter? [message #1787 is a reply to message #1764] Fri, 24 February 2006 01:45 Go to previous messageGo to previous message
snowdeal is currently offline  snowdeal
Messages: 22
Registered: February 2006
Junior Member
dev wrote on Thu, 23 February 2006 05:20

1. have you got dummy network device in VPS?
vps# ifconfig -a

Did you simply move it from host via vzctl set --netdev_add?




i do now Razz thanks for the hint. i created it on the hardware node and moved it to the vps.

dev wrote on Thu, 23 February 2006 05:20

2. VPS have no rights to change MAC addresses by default.
This is a security limitation.

So you need to give CAP_NET_ADMIN capability to your VPS:
host# vzctl set VPSID --capability net_admin:on



thanks for that tip, but since i'm creating the dummy device on the hw node, i don't need to change the mac address in the vps.

but! i now have a new problem. after i create the dummy device and move it to the vps, inside the vps i then create the tap interface [1] but when i try to create br0 ( obviously i've installed bridge-utils in the vps ), i get an error [3]. perhaps i don't have another "capability option" turned on that's off by default? perhaps sys_admin or ve_admin?

is there a "capability option" that would allow me to create bridges in the vps?

is there a more detailed explanation of various capability options beyond the vzctl man page [4]?


[1] openvpn --mktun --dev tap0
[2] brctl addbr br0
[3] add bridge failed: Operation not permitted
[4] http://openvz.org/documentation/mans/vzctl.8
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message icon14.gif
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: VPS cannot shutdown
Next Topic: Using Ksplice for kernel updates
Goto Forum:
  


Current Time: Mon Aug 04 22:06:14 GMT 2025

Total time taken to generate the page: 1.14635 seconds