Sharing internet in appvm with Two ethernet cards or wifi

User Support
1

Hello, how to share default eth0 interface with second ethernet card attached to AppVM (fedora based)? I guess I need to add nftables rules? Somebody familiar with Qubes firewall chains can help? Or give me another solution…

I want then connect router and give that router internet connection from qubes appVm, then connect with Android devices to the router to have internet access from AppVM at Android devices.

Another way was to attach wifi adapter and start wifi ap point. But this also failed, because new created point does not do DHCP and do not give IP to connected devices or (if created with NetworkManager) ask for username&password and look as “peer”, not as access point on android phone (and I don’t know username only password) default “user” and password rejected.

2

Could you rephrase what you are aiming to achieve, maybe with a block diagram? I have no idea what the goal is here.

3

Default internet access through eth0 at AppVM.
eth1 - second Ethernet card at this the same AppVM and router connected to this card and I want internet access at this router.

I want the AppVM to:

  1. Forward traffic from the second Ethernet interface, for example eth1, to eth0.
  2. Perform NAT/masquerading so devices on the router’s network can access the internet.
  3. Allow Android devices connected to the physical router to receive IP addresses and use the AppVM’s internet connection.

I’m not sure how this interacts with Qubes firewall chains, or whether I should configure the forwarding and NAT rules with nftables, NetworkManager, or another method.

I also tried using a Wi‑Fi adapter directly in the AppVM as an access point:

However, that did not work. The Wi‑Fi network either failed to provide DHCP addresses, or NetworkManager created a peer-style connection that asked for a username and password instead of behaving like a normal WPA access point.

sys-net ← whonix or vpn ← AppVM (with second eth card) ↔ router ← wifi connected android devices

sys-net ← whonix or vpn ← AppVM (with wifi card) ← wifi connected android devices

4

Network cards are connected to sys-net.
If you wan’t to have separate networks then make second sys-net.

Unless, you have computer in one room and router in another one and wan’t to have internet in both rooms then it would be understendable.

So eth0 connect to internet and forward to eth1 where router is and then forward to qubesos computer wifi card. Router wifi is external so no question there.

Is that correct?

It would be simpler to connect internet to router.