On Wed, May 07, 2014 at 08:34:59AM +0000, WANG Cheng D wrote: There are several options for the dedicated NIC - Use <hostdev mode="capabilities" type="net"> http://libvirt.org/formatdomain.html#elementsHostDevCaps This simply moves the host NIC into the container's network namespace, making it invisible to the host, and only usable by that one container - Use <interface type="direct"> http://libvirt.org/formatdomain.html#elementsNICSDirect This connects the host NIC to a container via macvlan device. This can also be used for the shared NICs. Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|