Mirrors/BastilleBSD_bastille
1
0
Fork 1
mirror of https://github.com/BastilleBSD/bastille.git synced 2025-12-18 00:11:07 +01:00
Code Issues Packages Projects Releases Wiki Activity

docs: restructure options for VLAN

Browse Source
This commit is contained in:
tschettervictor
2025-05-28 08:11:41 -06:00
committed by GitHub
parent 2d9b44ed72
commit 1b224f3aa5
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docs/chapters/networking.rst
View File

@@ -189,7 +189,7 @@ Virtual Network (VNET) creates a private network interface for a container. This
includes a unique hardware address. This is required for VPN, DHCP, and similar includes a unique hardware address. This is required for VPN, DHCP, and similar
containers. containers.
To create a VNET based container use the ``-V`` option, an IP/netmask and To create a VNET based container use the ``-V|--vnet`` option, an IP/netmask and
external interface. external interface.
.. code-block:: shell .. code-block:: shell
@@ -316,11 +316,11 @@ the bridge for the jail must carry tagged VLAN packets, e.g. you can bridge a VL
the jail and in the jail you then can access all VLANs. But be careful: This may have the jail and in the jail you then can access all VLANs. But be careful: This may have
security implications. security implications.
You cannot use the ``-V``/``--vnet`` options with interfaces that have dots (.) in the name, which is the You cannot use the ``-V|--vnet`` options with interfaces that have dots (.) in the name, which is the
standard way of naming a VLAN interface. This is due to the limitations standard way of naming a VLAN interface. This is due to the limitations
of the JIB script that Bastille uses to manage VNET jails. of the JIB script that Bastille uses to manage VNET jails.
You can however use ``-B``/``--bridge`` with VLAN interfaces (even with dots in the name). You can however use ``-B|--bridge`` with VLAN interfaces (even with dots in the name).
Using this method you create bridge interfaces in ``rc.conf`` and only add VLANs, that are needed Using this method you create bridge interfaces in ``rc.conf`` and only add VLANs, that are needed
for the jail. The jail only has access to this VLAN then and not to the whole trunk. for the jail. The jail only has access to this VLAN then and not to the whole trunk.
Below is an ``rc.conf`` snippet that was provided by a user who has such a configuration. Below is an ``rc.conf`` snippet that was provided by a user who has such a configuration.
@@ -349,7 +349,7 @@ Below is an ``rc.conf`` snippet that was provided by a user who has such a confi
ifconfig_eth1_20="up" ifconfig_eth1_20="up"
ifconfig_eth1_30="up" ifconfig_eth1_30="up"
Notice that the interfaces are bridge interfaces, and can be used with ``-B``/``--bridge`` Notice that the interfaces are bridge interfaces, and can be used with ``-B|--bridge``
without issue. without issue.
Regarding Routes Regarding Routes