Installation guide

Note
IP address configuration, be it dynamic or static, should be configured on the bridge itself (for
example, in the ifcfg-br0 file). Network access will not function as expected if IP address
details are configured on the physical interface that twehe bridge is connected to.
Warning
The line, TYPE=Bridge, is case-sensitive. It must have uppercase 'B' and lower case 'ridge'.
After configuring, restart networking or reboot.
# service network restart
Configure iptables to allow all traffic to be forwarded across the bridge.
# iptables -I FORWARD -m physdev --physdev-is-bridged -j ACCEPT
# service iptables save
# service iptables restart
Note
Alternatively, prevent bridged traffic from being processed by iptables rules. In
/etc/sysctl.conf append the following lines:
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
Reload the kernel parameters configured with sysctl.
# sysctl -p /etc/sysctl.conf
Restart the libvirt daemon.
# service libvirtd reload
You should now have a " shared physical device", which guests can be attached and have full LAN
access. Verify your new bridge:
# brctl show
bridge name bridge id STP enabled interfaces
virbr0 8000.000000000000 yes
br0 8000.000e0cb30550 no eth0
Note, the bridge is completely independent of the virbr0 bridge. Do not attempt to attach a physical
device to virbr0. The virbr0 bridge is only for Network Address Translation (NAT) connectivity.
Chapt er 1 0 . Net work Con figu rat ion
139