Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@cloudstack.apache.org
Received-SPF: pass (athena.apache.org: domain of sanjeev.neelarapu@citrix.com
 designates 103.14.252.240 as permitted sender)
From: Sanjeev Neelarapu <sanjeev.neelarapu@citrix.com>
To: "users@cloudstack.apache.org" <users@cloudstack.apache.org>
Subject: RE: Security Groups
Thread-Topic: Security Groups
Thread-Index: AQHOtODaqy6cjTnqXUqdDC5sTr0TrZnL6B2AgAAHP4CAAAVvAIAAAZyAgACx4mA=
Date: Thu, 19 Sep 2013 07:24:21 +0000
Message-ID: 
 <D25E116F470C5E4A869A2A9E42883632064C541A@SINPEX01CL01.citrite.net>
References: 
 <BLU176-W29A7C16E10B6292A3DE981B4210@phx.gbl>,<AD839034-D22A-4114-8424-C3C99887CC49@citrix.com>,<BLU176-W31B5AE2141A1A2F18D77FDB4210@phx.gbl>,<D4449876-966F-4C45-8D46-8A17E7CFBD3C@citrix.com>
 <BLU176-W40C5830B04767F4B47A70EB4210@phx.gbl>
In-Reply-To: <BLU176-W40C5830B04767F4B47A70EB4210@phx.gbl>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

By default xen6.0.2 comes with openvswitch. Set it to bridge mode by using =
: "xe-switch-network-backend bridge" command on xenserver.

-----Original Message-----
From: Michael Phillips [mailto:mphilli7823@hotmail.com]=20
Sent: Thursday, September 19, 2013 10:16 AM
To: users@cloudstack.apache.org
Subject: RE: Security Groups

Sorry posted the wrong thing...please view this.
http://pastebin.com/NF28fpq7

> From: jayapalreddy.uradi@citrix.com
> To: users@cloudstack.apache.org
> Subject: Re: Security Groups
> Date: Thu, 19 Sep 2013 04:40:14 +0000
>=20
> There are no cloudstack configured  iptables rules on your xen host.
> It seems iptables are stopped on the host ?=20
>=20
> Please check is CSP installed correctly not he host.
> Please try to force connect or host once.
>=20
>=20
> Thanks,
> Jayapal
>=20
>=20
>=20
> On 19-Sep-2013, at 9:50 AM, Michael Phillips <mphilli7823@hotmail.com>
>  wrote:
>=20
> > http://pastebin.com/xf9SBzVY
> >=20
> >> From: jayapalreddy.uradi@citrix.com
> >> To: users@cloudstack.apache.org
> >> Subject: Re: Security Groups
> >> Date: Thu, 19 Sep 2013 03:54:51 +0000
> >>=20
> >> Hi,
> >> Can you please share  host 'iptables -L -nv' output on pastebin
> >>=20
> >> Thanks,
> >> Jayapal
> >>=20
> >> On 19-Sep-2013, at 8:04 AM, Michael Phillips=20
> >> <mphilli7823@hotmail.com>
> >> wrote:
> >>=20
> >>> Having troubles getting security groups to function My "test"=20
> >>> environment is as follows:
> >>> Cloudstack 4.1.1 on centos6.4Xen Server 6.0.2, CSP installed,=20
> >>> iptables running...not sure if it needs to be but it is by default, a=
ll xen patches installed.Primary Storage =3D iscsiSecondary Storage =3D nfs=
 on mgmt serverSystem VM's and router are running as expected.Network =3D f=
lat 192.168.50.0/24 I then create 2 instances(vm's) based on the centos5.6 =
template provided and assign them to the "default" security group. The inst=
ances are able to "ping" each other, and I thought the expected behavior is=
 that they should not be able to, since the default security group has 0 in=
gress rules which should block all inbound traffic.
> >>> What could I be missing??
> >>>=20
> >>>=20
> >>>=20
> >>> 		 	   		 =20
> >>=20
> > 		 	   		 =20
>=20
 		 	   		 =20