start cluster wide firewall API

[pve-firewall.git] / README

diff --git a/README b/README
index 2f0840dc90656f3a256e9e62d89b0b004ebb59e5..7fd313b08d69e500c9a5023a91f749fd4996a9e6 100644 (file)
--- a/README
+++ b/README
@@ -107,6 +107,21 @@ iface pm0 inet static
        gateway  192.168.10.1
        VETH_BRIDGETO vmbr0
 
+auto vmbr1
+iface vmbr1 inet manual
+      bridge_ports none
+      bridge_stp off
+      bridge_fd 0
+
+# setup masqueraded bridge port vmbr1/pm1 using pm0
+# NOTE: this needs kernel 3.10.0 or newer (for conntrack --zone) 
+auto pm1
+iface pm1 inet static
+       address 10.10.10.1
+       netmask 255.255.255.0
+       VETH_BRIDGETO vmbr1
+       VETH_MASQUERADE pm0
+
 ...
 
 --------------------------------