Return-Path: X-Original-To: apmail-incubator-cloudstack-users-archive@minotaur.apache.org Delivered-To: apmail-incubator-cloudstack-users-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id E26ABE765 for ; Wed, 16 Jan 2013 17:28:25 +0000 (UTC) Received: (qmail 78605 invoked by uid 500); 16 Jan 2013 17:28:25 -0000 Delivered-To: apmail-incubator-cloudstack-users-archive@incubator.apache.org Received: (qmail 78566 invoked by uid 500); 16 Jan 2013 17:28:25 -0000 Mailing-List: contact cloudstack-users-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: cloudstack-users@incubator.apache.org Delivered-To: mailing list cloudstack-users@incubator.apache.org Received: (qmail 78558 invoked by uid 99); 16 Jan 2013 17:28:25 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 16 Jan 2013 17:28:25 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of nrg3tik@gmail.com designates 209.85.220.172 as permitted sender) Received: from [209.85.220.172] (HELO mail-vc0-f172.google.com) (209.85.220.172) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 16 Jan 2013 17:28:20 +0000 Received: by mail-vc0-f172.google.com with SMTP id l6so525118vcl.17 for ; Wed, 16 Jan 2013 09:27:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:content-type; bh=da3/H67u8fs16P1g4KNKEj/x6awWRfVK/5TUKmPJibs=; b=JUMrSTBqfOEdWB1G6ptf7i5stPrqM+0NE7dMqmyytzFttax5zIFheaINJjLkGrRTuv Wrv3HPNeoIXdfTiir85Iy87J0unsMOSNzuQgATCt2eRrI7Xr93gsR/aFIPP0NTmpknxw nyN3WToZALPu+B35cI3KRdK2Z9on0r2MXm0OQFynGwU2e8Lc1zcJ8YmO6iKObftMOw+o oQXjJpYXJLV/lFfg3+DpJAWO8XIz/PYmIWu9L0OdDxi3f6JxUdN3E20lmqC3KjmsF8Rg yXGZnXife1u6bnmjApL3r1hxunOJfoDo0EXFUsZP3tJBIkvf7vK28QcTWlGuPNPTig3L a0qg== MIME-Version: 1.0 X-Received: by 10.52.174.109 with SMTP id br13mr1847877vdc.23.1358357279538; Wed, 16 Jan 2013 09:27:59 -0800 (PST) Received: by 10.58.169.196 with HTTP; Wed, 16 Jan 2013 09:27:59 -0800 (PST) In-Reply-To: References: Date: Wed, 16 Jan 2013 21:27:59 +0400 Message-ID: Subject: Re: Router problem From: Aleksey Samarin To: cloudstack-users@incubator.apache.org Content-Type: multipart/alternative; boundary=bcaec51b15e51fff5f04d36b33ec X-Virus-Checked: Checked by ClamAV on apache.org --bcaec51b15e51fff5f04d36b33ec Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Thank you for reply! Today after reboot switch, problem is gone. Thanks! 2013/1/16 Mathias Mullins > Murali, > > Can you move the VR to the same host as the SSVM an test again. > > Thanks, > Matt > > On Jan 16, 2013, at 8:45 AM, "Murali Reddy" > wrote: > > > On 16/01/13 1:31 AM, "Aleksey Samarin" wrote: > > > >> Hi! > >> > >> Yes, ssvm and cpvm have internet access. Virtual router can't. And ssv= m, > >> cpvm and router on same host right now. > > > > Did you choose the network offering with source NAT service for guest > > network? If source NAT is enabled in the network offering, is the NAT > > table is set up correctly on the VR? If all CPVM, SSVM and VR are runni= ng > > on same host, the public NIC's of all three VM's are connected to same > > bridge corresponding to public IP vlan? > > > >> > >> > >> 2013/1/15 Ahmad Emneina > >> > >>> On 1/15/13 11:51 AM, "Aleksey Samarin" wrote: > >>> > >>>> Thx for reply! > >>>> > >>>> Yes, i checked fw rules. Output is accept. > >>>> Btw test for sure: > >>>> > >>>> #!/bin/sh > >>>> iptables -P INPUT ACCEPT > >>>> iptables -P FORWARD ACCEPT > >>>> iptables -P OUTPUT ACCEPT > >>>> iptables -F INPUT > >>>> iptables -F OUTPUT > >>>> iptables -F FORWARD > >>>> iptables -F POSTROUTING -t nat > >>>> iptables -F PREROUTING -t nat > >>>> > >>>> After this and after turning off iptables, still can't ping public g= w. > >>>> > >>>> Any thoughts? > >>>> > >>>> All the best > >>>> > >>>> 2013/1/15 Mathias Mullins > >>>> > >>>>> Aleksey, > >>>>> > >>>>> Have you checked the firewall rules on the Virtual Router to see if > >>> you > >>>>> are allowing internet traffic? > >>>>> > >>>>> Thanks, > >>>>> Matt Mullins > >>>>> > >>>>> > >>>>> > >>>>> On 1/15/13 5:02 AM, "Aleksey Samarin" wrote: > >>>>> > >>>>>> Hello everybody! > >>>>>> > >>>>>> I have a wierd problem with virtual router, after create, guest > >>> network > >>>>>> works fine but gateway to internet is unreachable. > >>>>>> Btw ssvm and cpvm works great and using internet. > >>>>>> I using cs4 on ubuntu, advanced network. > >>>>>> > >>>>>> All the best > >>> > >>> Hi Aleksey, > >>> > >>> You mentioned your cpvm and ssvm can access the internet just fine, > >>> right? > >>> The virtual router cant? Are they on different hosts? If that is the > >>> case > >>> I'd imagine the public vlan isnt trunked correctly to the second host= . > >>> Could that be it? > >>> > >>> -- > >>> =C6 > > > > > --bcaec51b15e51fff5f04d36b33ec--