How we composed our KVM/VMware setup at

Link :

In our setup (EQ4) we have a different IP for the dedicated rootserver (the EQ4) than our subnet.

As Hetzner routes subnets and doesn’t provide them ‘just’ available you can’t use bridged networking in a normal way.

The network at Hetzner is setup that ONLY the MAC-address (physical network adapter so to speak) of the EQ4 machine is allowed on the network.

Their solution, provided through their wiki, is to use NAT.

Our professionals in networking don’t like NAT, certainly not on dedicated hardware and there is an easy way around this.

We got our details from;


  • You are on a different subnet with your EQ4 than your host is
  • or, same as above but you have multiple subnets (implicitly making your host differing from one of them)
  • You run Linux (any, really) as your host operating system
  • You use VMware Server to virtualize your environmentHelpfull
  • We made this using debian as the host
  • We have FreeBSD guests
  • Installed VMware Server version 2Syntax
    • We will use EQ4 host address
    • We get subnet routed to our box from Hetzner (14 usable ip)

    Setup of the Host

    • By defailt your /etc/network/interfaces (or similar) will look like
      	# device: eth0
      	auto  eth0
      	iface eth0 inet static
      	# default route to access subnet
      	up route add -net netmask gw eth0


    • We added the following (basically one route add per usable IP)
      	# Virtual subnet hosts routing
      	up ip addr add dev eth0
      	# Virtual hosts dedicated routing
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
      	up route add -host gw
    • Now just setup VMware to provide your virtual machines with BRIDGED networking

    Setup of the Guest

    • Install the VMware tools if you like (remember to install /usr/ports/misc/compat6x for FreeBSD 7 and up with VMware 2.0.2 or lower)
    • For FreeBSD your almost there, just add these lines to your /etc/rc.conf
      	# Static routes
      	static_routes="direct default"
      	route_direct=" -iface em0"


    • Remember/note that you have to add your EQ4 ip-address as the default route on your guest. Do not use the ‘Hetzner‘ provided gateway as that will block traffic
    • Also remember to put a usefull /etc/pf.conf on your machine!
    • (which goes for the linux base EQ4 as well!)