Need help on networking for Physical Isolation Gateway in VM

Support
1

I’m new to Whonix but not Linux and am trying to get the networking configured for a Physically Isolated Whonix-Gateway in a VirtualBox VM.

I’ve got Debian installed on a dedicated host computer, with 2 NICs, with VirtualBox, and Whonix-Gateway setup in VirtualBox.

The 1st NIC is working fine and the Whonix-Gateway can successfully reach the internet. I’m just having trouble on the internal Gateway to Workstation side of things.

I want to connect other non-Whonix workstations to the Physically Isolated Whonix-Gateway through the Gateway’s 2nd NIC.

I see from the instructions that either NAT + Forwarding or Bridged Networking can be used.

But it doesn’t explain what specific networking settings to put for the OS physical adapters and VirtualBox virtual adapters, on the Gateway and Workstation.

Could somebody please guide me on what network settings are needed for this Physically Isolated Whonix-Gateway VM setup?

For example:

For Bridged Networking on Gateway:

  • What network settings do I put in for the Whonix-Gateway’s Debian Host physical adapter #2?

  • What network settings to I put in for the non-Whonix Workstation’s physical adapter?

For NAT Networking on Gateway:

  • What network settings do I put in for the Whonix-Gateway’s Debian Host physical adapter #2?

  • What port forwarding settings do I put in for the Whonix-Gateway’s VirtualBox virtual adapter #2?

  • What network settings to I put in for the non-Whonix Workstation’s physical adapter?

I’m on a trusted network, so either type of networking is fine with me. I just need to get one configured and working.

Any help would be much appreciated. Thanks.

2

I’m assuming the network settings for the non-Whonix Workstation would follow the instructions on the Other Operating Systems page?

address 192.168.0.12
netmask 255.255.255.0
gateway 192.168.0.10
nameserver 192.168.0.10

I can see the packets from my non-Whonix Workstation reaching my Gateway Host’s physical network adapter.

And my Whonix-Gateway VM has an internet connection on the adapter #1.

It just seems the Gateway Host adapter #2 settings need to be set correctly for the traffic to route through the Whonix-Gateway VM?

I’ve tried a few different configurations here without success. I’m probably just missing some small Whonix specific setting correction on this Gateway Host adapter #2?

3

Nevermind. I got it working now.

The key with Bridge Networking was to NOT CONFIGURE the Gateway Host physical adapter #2 settings and let the Whonix-Gateway VM do it via Bridge Networking.

I had been putting network settings into the Gateway Host’s physical adapter #2 and this screwed it up.

The non-Whonix Workstation connects good with the before mentioned settings:

address 192.168.0.12
netmask 255.255.255.0
gateway 192.168.0.10
nameserver 192.168.0.10

All working good now. Resolved.