debian KVM network bridge

[philo_neo]

Hi,
I've installed debian 8.1 on AMD FX quad cores, also i've compiled a kernel 4.2.5 with KVM sources.
The virtualisation work fine, i've two windows's virtualization :
1/ windows xp pro for used a softwave firewall just for dectect intrusion, the ip adress is 192.168.1.100.
2/ windows 2008 server for reseved the messaging with outlook, the ip adress is 192.168.0.50.
the ip adress for debian platform is 192.168.0.59 on network interface > eth0.
After has set put KVM the prompt change like this named machine :

Code: Select all

root@dct-aragone
vmX # 

Now i don't created the second interface for windows 2008, i tried to setup windows xp pro (virtual firewall) at first time.
My hard firewall is at 192.168.0.1 and the router is 192.168.1.1, there are a NAT (network translation adress) !
Also i've six PCs on my network and is work fine, i've a VLAN with a managable switch, i've two VLAN, the first VLAN is the DMZ at 192.168.1.x, the second VLAN is 192.168.0.x after hard firewall !
I do the first bridge between 192.168.0.59 and 192.168.1.100 (i forgot the command for do it), this configuration seems amazing but a want to dectect the intrusion on my router (192.168.1.1) and this adress 192.168.1.100 is out of range to VLAN.

this is the /etc/network/interfaces :

Code: Select all

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

source /etc/network/interfaces.d/*

# The loopback network interface
auto lo
iface lo inet loopback

# Management interface
auto eth0
iface eth0 inet static
        address         192.168.0.59
        netmask         255.255.0.0
        gateway         192.168.0.1
        dns-nameservers 192.168.1.1
        dns-search      8.8.8.8
        # bridge_ports    eth0
        # bridge_stp      on
        # bridge_fd       0
        # bridge_maxwait  0

auto br-lan
iface br-lan inet static
        address         192.168.1.100
        netmask         255.255.255.0
        gateway         192.168.0.1
        bridge_ports    eth0
        bridge_stp      on
        bridge_fd       0
        bridge_maxwait  0

this is the /etc/resolv.conf what re-created after eatch reboot :

Code: Select all

# Generated by NetworkManager
search ws.nsrc.org

QUESTIONS :
1/ i must to add a second network card for connected at DMZ's VLAN ?
2/ how to process for this projet ?
3/ how to use KVM parametres for fix the network card and IP adress >> # kvm hda.deb.raw -smp 2 -net (?) ?
4/ how to setup DNS ?

Regards
Philippe