Assign a virtual MAC address to a jail [TheBrig]

[himbrr]

Hello guys,

does anyone know how to assign a virtual mac address to a TheBrig jail?
I got a new router from my provider and it doesn't recognize if there are multiple IP addresses on one MAC address.

Currently I'm using nas4free 9.2.0.1-972 (Embedded) and TheBrig 0.8 as jail manager. It's not the Alcatraz version.

What are your recommendations? Migrate TheBrig to Alcatraz or ? Update nas4free?

Cheers!
himbrr

[geaves]

does anyone know how to assign a virtual mac address to a TheBrig jail?
I got a new router from my provider and it doesn't recognize if there are multiple IP addresses on one MAC address.

TBH, my understanding of routers is that the only time you start getting involved in MAC addresses is if you apply MAC filtering within the router as security.
Most routers only deal with assigning ip addresses via dhcp they may 'pick up' the MAC address but generally it's ignored unless MAC Filtering is enabled.

Perhaps make and model of router might help.

As an after thought, most routers do not 'see' machines that have been given a static ip address such as the ip address assignment of a jail. Whilst I have 2 jails running with a static ip my router cannot 'see' them but they are still accessible on the network...i.e. I can ping that ip address from another machine.

[himbrr]

Perhaps make and model of router might help.

It's a Speedport W724V (OEM router). Which is made for the typical household without a nas/homeserver...

I need to open some ports to access the jails applications via the internet. To add a forwarding rule I need to choose one of the recognized network devices. I'm not able to add an IP address manually...

The router recognizes all active network devices at the network, but only one IP per MAC address. I think the displayed list, is the ARP table.
In this case I need one unique MAC address per IP, also for the jails.
Currently the router has associated the NAS MAC address with a jail IP address.

As an after thought, most routers do not 'see' machines that have been given a static ip address such as the ip address assignment of a jail. Whilst I have 2 jails running with a static ip my router cannot 'see' them but they are still accessible on the network...i.e. I can ping that ip address from another machine.

At the LAN there shouldn't be any issue. All jails are available via it's IP addresses.
The case is getting the jails available via the WAN through NAT port forwarding.

[geaves]

The router recognizes all active network devices at the network, but only one IP per MAC address. I think the displayed list, is the ARP table.

Certainly sounds like it, but the ARP table would not have an issue with multiple ip's to one MAC address, it would fall over it were the other way round.

Googling your router I can find an english manual, and according to that there is an option to 'enable/disable mac mapping' in the port forwarding section, I take it yours does not not have that.

I can understand now why you are asking for a 'virtual mac',

I would suggest what might work is ip aliasing, this may help your situation an outline of this is http://www.penguintutor.com/linux/netwo ... s-tutorial but could this be done on nas4free....I'm sorry I don't know, but I don't see why not.

Perhaps the other option maybe to start from the ground up, use ip addresses in a logical order for the nas and each subsequent jail, so nas has x.x.x.200, then each jail 201, 202 etc.

What I would start with, is too shutdown the jails and restart the router, the router should 'see' the MAC and the ip of the nas, if it does restart 1 jail, restart the router, what does the router see now is it the same as having the jails shutdown, i.e. ip address >> MAC of nas, if not then ip aliasing maybe the answer or contacting tech support of the ISP.....who will probably not have a clue anyway.

The other option is can you telnet or ssh to the router and edit the arp table, my guess is you can't as most oem routers lock down this function.

[himbrr]

Certainly sounds like it, but the ARP table would not have an issue with multiple ip's to one MAC address, it would fall over it were the other way round.

It's not directly an ARP table but some kind of. The table shows a hostname and a IP+MAC column. IP + MAC is combined...

Googling your router I can find an english manual, and according to that there is an option to 'enable/disable mac mapping' in the port forwarding section, I take it yours does not not have that.

There are different versions of the installed Firmware. My model (Type B) doesn't have as many options as shown at the english manual.
To add a forwarding rule I just can choose from the recognized hostnames...

Perhaps the other option maybe to start from the ground up, use ip addresses in a logical order for the nas and each subsequent jail, so nas has x.x.x.200, then each jail 201, 202 etc.

I do have such a logical concept for all jails. I'm starting at .9 (nas) to .14 (jails).
Each application has it's own IP address.

Another solution would be portforwading at the nas4free.
I could open the needed ports at the router and point all to the nas.
The nas redirect them to the specific IP address.
Do nas4free embedded support such permanent port forwardings?
Is it possible to do it via the Firewall Rules?
EDIT: Nevermind... I can manually add a MAC address and hostname, but I can't set the IP address...

..., if not then ip aliasing maybe the answer or contacting tech support of the ISP.....who will probably not have a clue anyway.

Who builds a router, where you can't manually assign a custom DNS server, wouldn't have any clue about such "advanced" standard features...
Sadly I hadn't the choice to use the router model of my first choice...

The other option is can you telnet or ssh to the router and edit the arp table, my guess is you can't as most oem routers lock down this function.

They locked down everything, but they provide the source of the firmware.

[geaves]

Sounds as if you have the same problem as with BT routers totally locked down, however, except they allow port forwarding to IP addresses irrespective of their device name, but they don't associate MAC addresses to a specific IP. I have a spare HH4 I now have a HH5 but I use a hacked VDSL modem as the BT one is pants.

[himbrr]

Do you have problems with the jails internet connection, too?
I have switched the routers, but now the jails haven't access to the internet anymore. The default gateway is set correctly...
So in my opinion the routers firewall is blocking the requests of the mac address with multiple IPs...

I have to figure out this issue with my ISP... a brand new router which doesn't perform well...

[geaves]

Do you have problems with the jails internet connection, too?

Yes and no, I did do a FreeBSD update from within the brig, as I was trying to update Plex and it kept failing to find a mirror, did the FreeBSD update and it was working again.

I have since removed my jails and gone down the chroot option.