DHCP/Firewall


#1

Hi All,

I have a Windows DHCP server on one of my vyos interfaces eth1, my VMs get the DHCP address but my home network is also getting these DHCP addresses. What firewall rule do I need to put in place to block my home network from getting the lab dhcp addresses?

Thanks

vyos@vyos:~$ show configuration
interfaces {
ethernet eth0 {
address 192.168.1.55/24
description “Home LAN”
duplex auto
hw-id 00:0c:29:b8:10:53
smp_affinity auto
speed auto
}
ethernet eth1 {
address 192.168.2.1/24
duplex auto
hw-id 00:0c:29:b8:10:5d
smp_affinity auto
speed auto
}
ethernet eth2 {
address 192.168.3.1/24
duplex auto
hw-id 00:0c:29:b8:10:67
smp_affinity auto
speed auto
}
ethernet eth3 {
address 192.168.4.1/24
duplex auto
hw-id 00:0c:29:b8:10:71
smp_affinity auto
speed auto
}
loopback lo {
}
}
nat {
source {
rule 100 {
outbound-interface eth0
source {
address 192.168.2.0/24
}
translation {
address masquerade
}
}
rule 101 {
outbound-interface eth0
source {
address 192.168.3.0/24
}
translation {
address masquerade
}
}
}
}
service {
ssh {
port 22
}
}
system {
config-management {
commit-revisions 20
}
console {
device ttyS0 {
speed 9600
}
}
gateway-address 192.168.1.1
host-name vyos
login {
user vyos {
authentication {
encrypted-password ****************
}
level admin
}
}
ntp {
server 0.pool.ntp.org {
}
server 1.pool.ntp.org {
}
server 2.pool.ntp.org {
}
}
package {
auto-sync 1
repository community {
components main
distribution helium
password ****************
url http://packages.vyos.net/vyos
username “”
}
}
syslog {
global {
facility all {
level notice
}
facility protocols {
level debug
}
}
}
time-zone UTC
}


#2

personally, I would split up your networks (VLANs or physical splits). If you have your network configured properly, you shouldnt have any bleed over. I don’t think a firewall rule is the right way to go with this situation.


#3

Yea I was thinking about VLANs I would need to do some routering between my home lan and lab since I want to have the VMs have internet access.

I also plan to have a thin client on my home lan access View Desktop images on my lab.

How would I setup VLANs under VYOS, i read the manual and it says I would need sub interfaces.

Any example you can provide would be great.


#4

Adding a VLAN in VyOS is nothing more than:

if you use the documentation and the tab button you will see the options available to you.