Return-Path: X-Original-To: apmail-cloudstack-issues-archive@www.apache.org Delivered-To: apmail-cloudstack-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 239FD10BF4 for ; Tue, 30 Jul 2013 10:15:50 +0000 (UTC) Received: (qmail 38914 invoked by uid 500); 30 Jul 2013 10:15:50 -0000 Delivered-To: apmail-cloudstack-issues-archive@cloudstack.apache.org Received: (qmail 38816 invoked by uid 500); 30 Jul 2013 10:15:49 -0000 Mailing-List: contact issues-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list issues@cloudstack.apache.org Received: (qmail 38800 invoked by uid 500); 30 Jul 2013 10:15:48 -0000 Delivered-To: apmail-incubator-cloudstack-issues@incubator.apache.org Received: (qmail 38796 invoked by uid 99); 30 Jul 2013 10:15:48 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 30 Jul 2013 10:15:48 +0000 Date: Tue, 30 Jul 2013 10:15:48 +0000 (UTC) From: "ASF subversion and git services (JIRA)" To: cloudstack-issues@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (CLOUDSTACK-2991) [PortableIPRange] CS should not allow portable IP with sourceNAT service on it MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-2991?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13723665#comment-13723665 ] ASF subversion and git services commented on CLOUDSTACK-2991: ------------------------------------------------------------- Commit b5f33ae0d8fcb0380f76de796013d18501b83423 in branch refs/heads/4.2 from [~murali.reddy] [ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=b5f33ae ] CLOUDSTACK-2991: [PortableIPRange] CS should not allow portable IP with sourceNAT service on it if a portable ip is first IP associated with a non-VPC network, then its being considered as source nat IP. This fix adds exemption for portable IP not to be considred for source nat. > [PortableIPRange] CS should not allow portable IP with sourceNAT service on it > ------------------------------------------------------------------------------ > > Key: CLOUDSTACK-2991 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2991 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the default.) > Components: Network Controller > Affects Versions: 4.2.0 > Environment: commit # 971c40d98e07ab6cddb8e6db5095c1acea935815 > Reporter: venkata swamybabu budumuru > Assignee: Murali Reddy > Fix For: 4.2.0 > > Attachments: logs.tgz > > > Steps to reproduce: > 1. Have latest CS setup with at least one advanced zone. > 2. Have at least one non-ROOT domain user > 3. Login as the above user and create at least one isolated network using createNetwork. > 4. Have at least one portable IP Range. > 5. Acquire at least one IP with isPortable=True > 6. deploy a VM using the above network. > Observations: > (i) Everything goes fine but, in this case network ended up with Portable IP as sourceNat ip. In this case, we dont allow source NAT ip to be transferrable across networks and this means using portableIP for sourceNat doesn't make sense. > (ii) It is good to disable sourceNAT ip for portableIP address. > Attaching all the required logs along with db dump. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira