OpenWrt Forum Archive

Topic: Isolating virtual machines using a separate DHCP & DNS

The content of this topic has been archived on 21 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hello,
I am running an openwrt tp-link wdr4300, interested in running a VM using vmware workstation and creating a situation where my vm has access to the WAN, but not to my LAN (at 192.168.1.1).

I pictured it something like creating a separate dhcp pool at a different subnet for the virtual machines.

Is my goal achievable in your eyes or should I be looking at a different solution such as host only network?

how about install a new network card and bind the vms to it.

would prefer not to, would rather keep my physical setup the same. is that impossible?

VLAN is an alternative to another physical network card. I use qemu/kvm with VLAN on a linux host in a similar scenario.

I do not understand, perhaps I was not clear about the setup.
The VM is running on a host machine that is in the LAN i'm trying to block the guest from. therefore as far as I know, VLAN is not a possibility.

I was thinking about tagging a VLAN on the LAN port to be used by the guest. I read in the pfsense documentation that they recommends against using tagged VLAN on an interface you use untagged because of inconsistent result on some network cards. It works for me anyway and it's worth a try if you can't tag the LAN for the VM host.

On the VM host you need to associate the tagged VLAN with an network interface/card on the guest. I can't help you a lot there since I don't use vmware myself.

The discussion might have continued from here.