This document outlines several network connectivity scenarios involving virtual machines and containers with different grades. The highest grade (A/A+) involves an LXC container, 4 VMs, and both GRE and OpenVPN tunnels that must be established for the container and VMs to have internet access and ping each other. The next grades (B/B+ through D/D+) involve progressively fewer VMs and tunnels but similar connectivity requirements between the VMs and containers.

1. Feedback

2. Observations
 Screenshots
 NAT
 DNS
 ping
 Troubleshooting
 Backups
 Test cases
 Professional report

3. ?????

4. Report
 What?
 Why?
 How?

5. D/D+  F
VM1VM2
Internet
• Checkpoint VM1
• VM2 has access to internet
• VM1 has access to internet when VM2 is running
• VM2 has 2 NICs, VM1 has 1 NIC

6. C/C+  D/D+
VM1VM2VM3
Internet
• Checkpoint VM1
• VM3 has access to internet
• VM2 has access to internet when VM3 is running
• VM1 has access to internet when VM3 and VM2 are running
• VM3 and VM2 have 2 NICs , VM1 has 1 NIC

7. B/B+  C/C+
LXC-ContainerVM2VM3
GRE or OpenVPN
Internet
VM4
• Checkpoint LXC-Container
• LXC-Container has access to internet only when GRE or
OpenVPN tunnel is established
• VM4 has access to internet
• VM3 can access to internet only when VM4 is running
• VM2 can access to internet only when both VM3 and VM4 are
running
• LXC-Container cannot ping VM3
• VM4, VM3 and VM2 have two NICs, LXC-Container has only one
NIC

8. A/A+  B/B+
LXC-ContainerVM1VM2VM3
GRE
Internet
VM4
OpenVPN
• Checkpoint LXC-Container
• LXC-Container has access to internet only when both GRE and
OpenVPN tunnels are established
• VM3, VM2 and VM1 may have access to internet only when
OpenVPN tunnel is established
• VM2 and VM1 may ping VM4 only when OpenVPN tunnel is
established
• VM1 can ping VM3 if VM2 is running
• LXC-Container cannot ping VM2
• LXC-Container can ping VM3 only when GRE tunnel is established
• VM4, VM3, VM2 and VM1 have 2 NIC, LXC-Container has only 1
NIC