| 1 | <?xml version='1.0' encoding='UTF-8'?>
|
|---|
| 2 | <!DOCTYPE topic PUBLIC "-//OASIS//DTD DITA Topic//EN" "topic.dtd">
|
|---|
| 3 | <topic xml:lang="en-us" id="network_internal">
|
|---|
| 4 | <title>Internal Networking</title>
|
|---|
| 5 |
|
|---|
| 6 | <body>
|
|---|
| 7 | <p>Internal Networking is similar to bridged networking in that the VM can directly communicate with the outside
|
|---|
| 8 | world. However, the outside world is limited to other VMs on the same host which connect to the same internal
|
|---|
| 9 | network. </p>
|
|---|
| 10 | <p>Even though technically, everything that can be done using internal networking can also be done using bridged
|
|---|
| 11 | networking, there are security advantages with internal networking. In bridged networking mode, all traffic goes
|
|---|
| 12 | through a physical interface of the host system. It is therefore possible to attach a packet sniffer such as
|
|---|
| 13 | Wireshark to the host interface and log all traffic that goes over it. If, for any reason, you prefer two or more
|
|---|
| 14 | VMs on the same machine to communicate privately, hiding their data from both the host system and the user,
|
|---|
| 15 | bridged networking therefore is not an option. </p>
|
|---|
| 16 | <p>Internal networks are created automatically as needed. There is no central configuration. Every internal network
|
|---|
| 17 | is identified simply by its name. Once there is more than one active virtual network card with the same internal
|
|---|
| 18 | network ID, the <ph conkeyref="vbox-conkeyref-phrases/product-name"/> support driver will automatically
|
|---|
| 19 | <i>wire</i> the cards and act as a network switch. The <ph conkeyref="vbox-conkeyref-phrases/product-name"/>
|
|---|
| 20 | support driver implements a complete Ethernet switch and supports both broadcast/multicast frames and promiscuous
|
|---|
| 21 | mode. </p>
|
|---|
| 22 | <p>In order to attach a VM's network card to an internal network, set its networking mode to Internal Networking.
|
|---|
| 23 | There are two ways to accomplish this: </p>
|
|---|
| 24 | <ul>
|
|---|
| 25 | <li>
|
|---|
| 26 | <p>Use the VM's <b outputclass="bold">Settings</b> in <ph conkeyref="vbox-conkeyref-phrases/vbox-mgr"/>. In the <b outputclass="bold">Network</b> section, select <b outputclass="bold">Internal Network</b> as the networking mode. Select the name of an existing internal network from the drop-down list below, or enter a new name into the <b outputclass="bold">Name</b> field.</p>
|
|---|
| 27 | </li>
|
|---|
| 28 | <li>
|
|---|
| 29 | <p>Use the command line, for example: </p>
|
|---|
| 30 | <pre xml:space="preserve">VBoxManage modifyvm "VM name" --nic<x> intnet</pre>
|
|---|
| 31 | <p>
|
|---|
| 32 | Optionally, you can specify a network name with the command:
|
|---|
| 33 | </p>
|
|---|
| 34 | <pre xml:space="preserve">VBoxManage modifyvm "VM name" --intnet<x> "network name"</pre>
|
|---|
| 35 | <p>If you do not specify a network name, the network card will be attached to the network
|
|---|
| 36 | <codeph>intnet</codeph> by default. </p>
|
|---|
| 37 | </li>
|
|---|
| 38 | </ul>
|
|---|
| 39 | <p>Unless you configure the virtual network cards in the guest operating systems that are participating in the internal network to use static IP addresses, you may want to use the DHCP server that is built into <ph conkeyref="vbox-conkeyref-phrases/product-name"/> to manage IP addresses for the internal network. See <xref href="../cli_topics/vboxmanage-dhcpserver.dita"/>.</p>
|
|---|
| 40 | <p>As a security measure, by default, the Linux implementation of
|
|---|
| 41 | internal networking only allows VMs running under the same user ID
|
|---|
| 42 | to establish an internal network. However, it is possible to
|
|---|
| 43 | create a shared internal networking interface, accessible by users
|
|---|
| 44 | with different user IDs.
|
|---|
| 45 | </p>
|
|---|
| 46 | </body>
|
|---|
| 47 |
|
|---|
| 48 | </topic>
|
|---|
