ACL on Private Gateway

Committed: Tue Aug 13 12:06:11 2013 +0530 ---------------------------------------------------------------------- docs/en-US/add-gateway-vpc.xml | 68 ++++++++++++++++++++++++++-- docs/en-US/images/replace-acl-icon.png | Bin 930 -> 982 bytes 2 files changed, 63 insertions(+), 5 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/aea98d22/docs/en-US/add-gateway-vpc.xml ---------------------------------------------------------------------- diff --git a/docs/en-US/add-gateway-vpc.xml b/docs/en-US/add-gateway-vpc.xml index 486cf84..2dedcee 100644 --- a/docs/en-US/add-gateway-vpc.xml +++ b/docs/en-US/add-gateway-vpc.xml @@ -144,16 +144,74 @@

ACL on Private Gateway The traffic on the VPC private gateway is controlled by creating both ingress and egress - network ACL rules. The ACLs contains both allow and deny rules. In addition to the default ACL - rules, rules you might have created are also listed in the ACL drop-down list. As per the - rule, all the ingress traffic to the private gateway interface and all the egress traffic out - from the private gateway interface are blocked. You can change this default behaviour while - creating a private gateway. + network ACL rules. The ACLs contains both allow and deny rules. As per the rule, all the + ingress traffic to the private gateway interface and all the egress traffic out from the + private gateway interface are blocked. + You can change this default behaviour while creating a private gateway. Alternatively, you + can do the following: + + + In a VPC, identify the Private Gateway you want to work with. + + + In the Private Gateway page, do either of the following: + + + Use the Quickview. See . + + + Use the Details tab. See through . + + + + + In the Quickview of the selected Private Gateway, click Replace ACL, select the ACL + rule, then click OK + + + Click the IP address of the Private Gateway you want to work with. + + + In the Detail tab, click the Replace ACL button. + + + + + replace-acl-icon.png: button to replace the default ACL behaviour. + + + The Replace ACL dialog is displayed. + + + select the ACL rule, then click OK. + Wait for few seconds. You can see that the new ACL rule is displayed in the Details + page. + +

Creating a Static Route &PRODUCT; enables you to specify routing for the VPN connection you create. You can enter one or CIDR addresses to indicate which traffic is to be routed back to the gateway. + + + In a VPC, identify the Private Gateway you want to work with. + + + In the Private Gateway page, click the IP address of the Private Gateway you want to + work with. + + + Select the Static Routes tab. + + + Specify the CIDR of destination network. + + + Click Add. + Wait for few seconds until the new route is created. + +

Blacklisting Routes http://git-wip-us.apache.org/repos/asf/cloudstack/blob/aea98d22/docs/en-US/images/replace-acl-icon.png ---------------------------------------------------------------------- diff --git a/docs/en-US/images/replace-acl-icon.png b/docs/en-US/images/replace-acl-icon.png index 6a15d45..ae953ba 100644 Binary files a/docs/en-US/images/replace-acl-icon.png and b/docs/en-US/images/replace-acl-icon.png differ