View source for Creating an RHEL 6 KVM Networked Bridge Interface

<table border="0" cellspacing="0">
<tr>
<td width="20%">[[Installing KVM Virtualization on RHEL 6|Previous]]<td align="center">[[Red Hat Enterprise Linux 6 Essentials|Table of Contents]]<td width="20%" align="right">[[Creating an RHEL 6 KVM Virtual Machine|Next]]</td>
<tr>
<td width="20%">Installing KVM Virtualization on RHEL 6<td align="center"><td width="20%" align="right">Creating an RHEL 6 KVM Virtual Machine</td>
</table>
<hr>


<htmlet>rhel6</htmlet>

By default, the KVM virtualization environment on Red Hat Enterprise Linux 6 only creates a virtual network to which virtual machines may connect. The goal of this chapter is to cover the steps involved in creating a network bridge on RHEL 6 enabling guest systems to share one or more of the host system’s physical network connections.

== RHEL 6 Virtual Networks and Network Bridges ==

A KVM virtual machine running on RHEL 6 has two options in terms of networking connectivity. 

One option is for it to be connected to a virtual network running within the operating system of the host computer. In this configuration any virtual machines on the virtual network can see each other but access to the external network is provided by Network Address Translation (NAT). When using the virtual network and NAT, each virtual machine is represented on the external network (the network to which the host is connected) using the IP address of the host system. This is the default behavior for KVM virtualization and requires no additional configuration, other than selecting the Virtual network option on the Network screen of the virt-manager new virtual machine wizard. Typically, a single virtual network is created by default, represented by the name default and the device virbr0.

In order for guests to appear as individual and independent systems on the external network (i.e. with their own IP addresses), they must be configured to share a physical network interface on the host. This is achieved by configuring a network bridge interface on the host system to which the guests can connect. In the remainder of this chapter we will cover the steps necessary to configure an RHEL 6 network bridge for use by KVM based guest operating systems.

== Creating an RHEL 6 Network Bridge ==

The creation of a network bridge involves the use of the bridge-utils package. Begin by checking if this is already installed by executing the following command:

<pre>
rpm –q bridge-utils
</pre>

If the package is not yet installed, install it using yum:

<pre>
su –
yum install bridge-utils
</pre>

With this package installed it is time to look at the current network configuration. The easiest way to do this is to run the ''ifconfig'' command. The following shows output from running ifconfig on a system on which KVM is installed, but on which a network bridge has yet to be configured:

<pre>
eth0      Link encap:Ethernet  HWaddr 00:13:72:0B:14:57
          inet addr:192.168.2.18  Bcast:255.255.255.255  Mask:255.255.255.0
          inet6 addr: fe80::213:72ff:fe0b:1457/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:14715 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8586 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:19628565 (18.7 MiB)  TX bytes:687049 (670.9 KiB)
          Memory:fe3e0000-fe400000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:8 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:480 (480.0 b)  TX bytes:480 (480.0 b)

virbr0    Link encap:Ethernet  HWaddr 62:C1:46:30:92:37
          inet addr:192.168.122.1  Bcast:192.168.122.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:4187 (4.0 KiB)
</pre>

In the above output, the entry for ''eth0'' represents a physical network adaptor on the host computer. This is the connection currently used by this host to access the external network. The ''virbr0'' entry represents the virtual network to which guest operating systems will connect if configured to do so.

In order to provide the option for guest operating systems to share the eth0 connection of the host it is necessary to establish a network bridge between eth0 and the virtual machines.

Begin the bridge creation process by gaining root access and changing directory to the ''/etc/sysconfig/network-scripts'' directory:

<pre>
su –
cd /etc/sysconfig/network-scripts
</pre>

If the interface to be bridged is currently running it should be taken down before proceeding:

<pre>
ifdown eth0
</pre>

The next step is to modify the script file for the physical network device. In this example the device is eth0 so we need to edit the ifcfg-eth0 file to add a BRIDGE= line. For the purposes of this example we will name the interface bridge0:

<pre>
DEVICE="eth0"
BOOTPROTO="dhcp"
HWADDR="00:13:72:0B:14:57"
IPV6INIT="yes"
IPV6_AUTOCONF="yes"
NM_CONTROLLED="yes"
ONBOOT="yes"
BRIDGE="bridge0"
</pre>

The next step is to create a script file for the bridge interface. The name of this file must take the form ''ifcfg-<bridgename>'' where ''<bridgename>'' matches the name of the bridge defined in the BRIDGE= directive outlined above.  Given this requirement, we will name the file ''ifcfg-bridge0''. The contents of this file for this example will read as follows:

<pre>
DEVICE="bridge0"
TYPE="Bridge"
BOOTPROTO="dhcp"
ONBOOT="yes"
DELAY=0
</pre>

Note that the DEVICE= line must refer to the bridge name previously specified (i.e. bridge0 in this instance). Save the file and then start up both interfaces:

<pre>
ifup eth1
ifup bridge0
</pre>

Using the ifconfig command, the new bridge interface should now be visible:

<pre>
bridge0   Link encap:Ethernet  HWaddr 00:13:72:0B:14:57
          inet addr:192.168.2.18  Bcast:255.255.255.255  Mask:255.255.255.0
          inet6 addr: fe80::213:72ff:fe0b:1457/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:951 errors:0 dropped:0 overruns:0 frame:0
          TX packets:970 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:760584 (742.7 KiB)  TX bytes:139643 (136.3 KiB)

eth0      Link encap:Ethernet  HWaddr 00:13:72:0B:14:57
          inet6 addr: fe80::213:72ff:fe0b:1457/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:15831 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9750 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:20420107 (19.4 MiB)  TX bytes:858409 (838.2 KiB)
          Memory:fe3e0000-fe400000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:11 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:816 (816.0 b)  TX bytes:816 (816.0 b)

virbr0    Link encap:Ethernet  HWaddr 62:C1:46:30:92:37
          inet addr:192.168.122.1  Bcast:192.168.122.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:4187 (4.0 KiB)
</pre>

== Configuring an RHEL 6 Firewall for a Network Bridge ==

If a firewall is enabled on the RHEL 6 host, it may be necessary to add an iptables rule to allow network traffic via the bridge interface. This is achieved by adding a rule similar to the following to the ''/etc/sysconfig/iptables'' configuration file:

<pre>
-A RH-Firewall-1-INPUT -i bridge0 -j ACCEPT
</pre>

The change to the firewall will not take effect until the service is restarted, so complete the configuration by running the following command at the prompt in a terminal window:

<pre>
/sbin/service iptables restart
</pre>

== Configuring a Virtual Machine to use the Network Bridge ==
<google>RHEL6BOX</google>
During the virtual machine creation process using the virt-manager tool, the network configuration screen will list now Host device eth0 (Bridge ‘bridge0’) under the Advanced options section of the final page of the new virtual machine creation wizard:
 

[[Image:rhel6_kvm_use_bridge.jpg|Configuring an RHEL 6 KVM guest to use a network bridge]]


When this option is selected for a virtual machine it will have access to the external network using the same eth0 device used by the host.

Assuming that KVM is now installed and a network bridge configured (if required), we are ready to move on to the next chapter and look at [[Creating an RHEL 6 KVM Virtual Machine]].


<htmlet>rhel6</htmlet>

<hr>
<table border="0" cellspacing="0">
<tr>
<td width="20%">[[Installing KVM Virtualization on RHEL 6|Previous]]<td align="center">[[Red Hat Enterprise Linux 6 Essentials|Table of Contents]]<td width="20%" align="right">[[Creating an RHEL 6 KVM Virtual Machine|Next]]</td>
<tr>
<td width="20%">Installing KVM Virtualization on RHEL 6<td align="center"><td width="20%" align="right">Creating an RHEL 6 KVM Virtual Machine</td>
</table>