Page Comparison

...

Scenario: host and guest system have a dedicated NIC. The NIC used by the Charon host has a private and a public IP address, the NIC used by the guest system a private IP address and optionally a public IP address..

If the NIC dedicated to the guest OS does not have a public IP address, the guest system may still be able to access the Internet via the customer network reachable across a VPN gateway. This will depend on the customer specific network configuration. This type of connection is the recommended way to provided external network access to the guest system as the VPN ensures that traffic across a public network is encrypted.

The basic steps to implement the above configuration are as follows:

• Create a cloud instance in which the Charon host system runs.
• Add two NICs to the Charon host system. One for the Charon host and one for the guest system.
• Configure the appropriate access rules for instance and NICs.
• One NIC is dedicated to the Charon host, one to the guest system. Configure a private and public IP address for the NIC used by the Charon host. Configure a private IP address for the NIC used by the guest system (and optionally a public IP address - not recommended).
• On the Charon host, remove the private IP address from the NIC dedicated to the guest system if it was automatically configured and ensure that the interface will be enabled when the system starts.
• Assign the appropriate NIC to the guest system.
• Configure the guest system MAC address to be the same as the the one of the NIC selected for the guest.
• After booting the guest system, configure the private IP originally assigned to the guest NIC by the cloud provider as the IP address of the guest Ethernet interface.
• Set the default route of the guest system to the default gateway or VPN gateway of the LAN.

...

• to communicate with the host system,
• other systems in cloud-internal network (e.g. other guest and host systems), 
• the customer internal network via a previously configured VPN gateway,
• directly with the Internet , if a public IP address was configured for the interface (not recommended).

...