Hacking playground network in qubes

Has somebody configured a “hacking playground” yet in qubes?

What i mean is: A separate netVM where all the qubes attached to can talk to each other without any annoying firewall.

I read here that xen networking protects against OSI layer 2 attacks, and wanted to ask if there is something i can do to use layer 2 attacks anyways.

I have not taken a deeper look at the networking in qubes, nor am i an iptables or otherwise firewall guru so maybe somebody smarter than me already did this.

Perhaps this is relevant:


I think this is a good start. Will try to disable all firewalls of the client qubes and see if they can talk to each other.