Network Fencing

General questions
1

Does anybody know how to use VyOS to build a network fence as described here:
http://docs.embotics.com/network_fencing.htm

I need to replace my EOL VMware Lab Manager 4.0 product, and would like know if VyOS can be used to accomplish network fencing, which I suspect it can.

I’m a newbie to VyOS, so any help would be appreciated.

Thanks.

2

Hello,
you create vss/dvs with port-group fenced-net01
you just deploy OVA, adding additional interface
attaching interface 0 to your management net
attaching interface 1 to fenced-net01 port group

You will need to configure NAT, DHCP, DNS forwarding
depending on what you need to do

for nat see user guide
http://wiki.vyos.net/wiki/User_Guide#NAT

3

Hi Syncer,

I have a private fenced network with two VMs. These each have one virtual NIC not attached to physical hardware NIC
192.168.1.2
192.168.1.3

I have my regular network on 10.1.184.0/24. I’d like to be able to get to the hosts in the fence using 2 IPs from my pool as follows:
10.1.184.2 ==> 192.168.1.2
10.1.184.3 ==> 192.168.1.3

The VyOS router has one virtual NIC on the fenced network and one physical NIC on 10.1.184.0/24 network.

I just don’t know how to create the NAT rules required to make this work. Any help would be appreciated.
I tried different combinations of the policy NAT as described here, but with no luck. My vSwitch in vCenter is configured to accept Promiscuous mode, which is a requirement of Lab Manager 4.0’s virtual router which is what I’m trying to simulate.

Thanks.