Red Hat Summit Red Hat SummitSupportKonsoleEntwicklerDemo startenKontakt

10.2. Bridged networking with libvirt

Bridged networking (also known as physical device sharing) is used for dedicating a physical device to a virtual machine. Bridging is often used for more advanced setups and on servers with multiple network interfaces.
Disable Xen network scripts

If your system was using a Xen bridge, it is recommended to disable the default Xen network bridge by editing /etc/xen/xend-config.sxp and changing the line: 

 (network-script network-bridge)
Copy to Clipboard Toggle word wrap
To: 
 (network-script /bin/true)
Copy to Clipboard Toggle word wrap
Disable NetworkManager

NetworkManager does not support bridging. Running NetworkManager will overwrite any manual bridge configuration. Because of this, NetworkManager should be disabled in order to use networking via the network scripts (located in the /etc/sysconfig/network-scripts/ directory): 

# chkconfig NetworkManager off
# chkconfig network on
# service NetworkManager stop
# service network start
Copy to Clipboard Toggle word wrap

Note

As an alternative to turning off NetworkManager, add "NM_CONTROLLED=no" to the ifcfg-* scripts used in the examples. If you do not either set this parameter or disable NetworkManager entirely, any bridge configuration will be overwritten and lost when NetworkManager next starts.
Creating network initscripts

Create or edit the following two network configuration files. This step can be repeated (with different names) for additional network bridges.

Change to the /etc/sysconfig/network-scripts directory: 
# cd /etc/sysconfig/network-scripts
Copy to Clipboard Toggle word wrap
Open the network script for the device you are adding to the bridge. In this example, ifcfg-eth0 defines the physical network interface which is set as part of a bridge: 
DEVICE=eth0
# change the hardware address to match the hardware address your NIC uses
HWADDR=00:16:76:D6:C9:45
ONBOOT=yes
BRIDGE=br0
Copy to Clipboard Toggle word wrap

Note

You can configure the device's Maximum Transfer Unit (MTU) by appending an MTU variable to the end of the configuration file. 
MTU=9000
Copy to Clipboard Toggle word wrap
Create a new network script in the /etc/sysconfig/network-scripts directory called ifcfg-br0 or similar. The br0 is the name of the bridge; this name can be anything as long as the name of the file is the same as the DEVICE parameter. 
DEVICE=br0
TYPE=Bridge
BOOTPROTO=dhcp
ONBOOT=yes
DELAY=0
Copy to Clipboard Toggle word wrap

Note

IP address configuration, be it dynamic or static, should be configured on the bridge itself (for example, in the ifcfg-br0 file). Network access will not function as expected if IP address details are configured on the physical interface that twehe bridge is connected to.

Warning

The line, TYPE=Bridge, is case-sensitive. It must have uppercase 'B' and lower case 'ridge'.
After configuring, restart networking or reboot. 
# service network restart
Copy to Clipboard Toggle word wrap
Configure iptables to allow all traffic to be forwarded across the bridge. 
# iptables -I FORWARD -m physdev --physdev-is-bridged -j ACCEPT
# service iptables save
# service iptables restart
Copy to Clipboard Toggle word wrap

Note

Alternatively, prevent bridged traffic from being processed by iptables rules. In /etc/sysctl.conf append the following lines: 
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-arptables = 0
Copy to Clipboard Toggle word wrap
Reload the kernel parameters configured with sysctl. 
# sysctl -p /etc/sysctl.conf
Copy to Clipboard Toggle word wrap
Restart the libvirt daemon. 
# service libvirtd reload
Copy to Clipboard Toggle word wrap
You should now have a "shared physical device", which guests can be attached and have full LAN access. Verify your new bridge: 
# brctl show
bridge name     bridge id               STP enabled     interfaces
virbr0          8000.000000000000       yes
br0             8000.000e0cb30550       no              eth0
Copy to Clipboard Toggle word wrap
Note, the bridge is completely independent of the virbr0 bridge. Do not attempt to attach a physical device to virbr0. The virbr0 bridge is only for Network Address Translation (NAT) connectivity.
Nach oben
Red Hat logoGithubredditYoutubeTwitter

Lernen

Testen, kaufen und verkaufen

Communitys

Über Red Hat Dokumentation

Wir helfen Red Hat Benutzern, mit unseren Produkten und Diensten innovativ zu sein und ihre Ziele zu erreichen – mit Inhalten, denen sie vertrauen können. Entdecken Sie unsere neuesten Updates.

Mehr Inklusion in Open Source

Red Hat hat sich verpflichtet, problematische Sprache in unserem Code, unserer Dokumentation und unseren Web-Eigenschaften zu ersetzen. Weitere Einzelheiten finden Sie in Red Hat Blog.

Über Red Hat

Wir liefern gehärtete Lösungen, die es Unternehmen leichter machen, plattform- und umgebungsübergreifend zu arbeiten, vom zentralen Rechenzentrum bis zum Netzwerkrand.

Theme

© 2025 Red Hat