Mirrors/BastilleBSD_bastille
1
0
Fork 1
mirror of https://github.com/BastilleBSD/bastille.git synced 2025-12-11 17:39:52 +01:00
Code Issues Packages Projects Releases Wiki Activity

docs: restructure options for VLAN

Browse Source
This commit is contained in:
tschettervictor
2025-05-28 08:11:41 -06:00
committed by GitHub
parent 2d9b44ed72
commit 1b224f3aa5
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docs/chapters/networking.rst
View File

@@ -189,7 +189,7 @@ Virtual Network (VNET) creates a private network interface for a container. This
includes a unique hardware address. This is required for VPN, DHCP, and similar
containers.
To create a VNET based container use the ``-V`` option, an IP/netmask and
To create a VNET based container use the ``-V|--vnet`` option, an IP/netmask and
external interface.
.. code-block:: shell
@@ -316,11 +316,11 @@ the bridge for the jail must carry tagged VLAN packets, e.g. you can bridge a VL
the jail and in the jail you then can access all VLANs. But be careful: This may have
security implications.
You cannot use the ``-V``/``--vnet`` options with interfaces that have dots (.) in the name, which is the
You cannot use the ``-V|--vnet`` options with interfaces that have dots (.) in the name, which is the
standard way of naming a VLAN interface. This is due to the limitations
of the JIB script that Bastille uses to manage VNET jails.
You can however use ``-B``/``--bridge`` with VLAN interfaces (even with dots in the name).
You can however use ``-B|--bridge`` with VLAN interfaces (even with dots in the name).
Using this method you create bridge interfaces in ``rc.conf`` and only add VLANs, that are needed
for the jail. The jail only has access to this VLAN then and not to the whole trunk.
Below is an ``rc.conf`` snippet that was provided by a user who has such a configuration.
@@ -349,7 +349,7 @@ Below is an ``rc.conf`` snippet that was provided by a user who has such a confi
ifconfig_eth1_20="up"
ifconfig_eth1_30="up"
Notice that the interfaces are bridge interfaces, and can be used with ``-B``/``--bridge``
Notice that the interfaces are bridge interfaces, and can be used with ``-B|--bridge``
without issue.
Regarding Routes