Return-Path: X-Original-To: apmail-cloudstack-users-archive@www.apache.org Delivered-To: apmail-cloudstack-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 3CF2410282 for ; Mon, 15 Dec 2014 20:36:10 +0000 (UTC) Received: (qmail 65832 invoked by uid 500); 15 Dec 2014 20:36:09 -0000 Delivered-To: apmail-cloudstack-users-archive@cloudstack.apache.org Received: (qmail 65783 invoked by uid 500); 15 Dec 2014 20:36:09 -0000 Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@cloudstack.apache.org Delivered-To: mailing list users@cloudstack.apache.org Received: (qmail 65771 invoked by uid 99); 15 Dec 2014 20:36:08 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 15 Dec 2014 20:36:08 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of cloudstck@trick-solutions.com designates 216.249.106.136 as permitted sender) Received: from [216.249.106.136] (HELO mail.w3fc.com) (216.249.106.136) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 15 Dec 2014 20:35:42 +0000 Received: from localhost (localhost [127.0.0.1]) by mail.w3fc.com (Postfix) with ESMTP id A86F0B46441 for ; Mon, 15 Dec 2014 15:35:41 -0500 (EST) X-Virus-Scanned: Debian amavisd-new at mail.w3fc.com Received: from mail.w3fc.com ([216.249.106.136]) by localhost (web1.w3fc.com [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id IuuBF8kDa253 for ; Mon, 15 Dec 2014 15:35:37 -0500 (EST) Received: from Tek505 (cpe-174-096-227-221.carolina.res.rr.com [174.96.227.221]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: cloudstck@trick-solutions.com) by mail.w3fc.com (Postfix) with ESMTPSA id 0079AB46399 for ; Mon, 15 Dec 2014 15:35:36 -0500 (EST) From: "Matthew Midgett" To: References: <003401d018a4$1e47f5c0$5ad7e140$@trick-solutions.com> <2A9B190D-4DA5-4CB4-879E-0FCE5B3AA5CE@icloud.com> In-Reply-To: <2A9B190D-4DA5-4CB4-879E-0FCE5B3AA5CE@icloud.com> Subject: RE: Proper way to make shared network Date: Mon, 15 Dec 2014 15:35:34 -0500 Message-ID: <004201d018a6$add30570$09791050$@trick-solutions.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQJbhBCezUOAxBOnbrGGAi7VrXlhSgLHLQPVm2QLnyA= Content-Language: en-us X-Virus-Checked: Checked by ClamAV on apache.org I should make the GW 10.0.1.1 and set the range from .1 to .254 so when the VR spawns it will take the .1? -----Original Message----- From: Paul Omamogho [mailto:omamogho@icloud.com] Sent: Monday, December 15, 2014 3:30 PM To: users@cloudstack.apache.org Subject: Re: Proper way to make shared network It should be just the plan without assigning any ip > On 15 Dec 2014, at 21:17, Matthew Midgett wrote: > > I just created the following Network service > > Description SharedRoutedNetwork > State Enabled > Guest Type Shared > label.persistent No > Egress Default Policy Allow > Availability Optional > Created by system No > Specify VLAN Yes > Specify IP ranges Yes > Conserve mode Yes > Network Rate (Mb/s) 1024 Mb/s > Traffic Type Guest > Supports Streched L2 Subnet No > Supported Services UserData, Firewall, Dhcp, PortForwarding, SourceNat, > StaticNat, Lb, Dns > > > I now went to Infrastructure >zones > networking > cloud-public > > added a > /24 > And then went to Infrastructure > zones > networking > cloud-guest and > removed the dynamic vlan range of 600-799 > > Now I went to networking on main page and added a guest network that > uses a > 10.0.1.0/24 on vlan 600 and uses the network offering that I created first. > > The cloud-guest switch ports are trunked so I went to the router and > created > vlan600 and put 10.0.1.1 for its ip. > > Is this the correct way to make a shared guest network? > > Should I have created the network on the router with no ip but just > the vlan? Would this make the cloudstack VR 10.0.1.1? and that would > be used for the default route? > > Just thinking about this I should remove the IP from the routers vlan > interface and then make the network have a gateway of 1 and start the > range at 1. This would make the VR the default gateway since it's > going to be natting the public ip's anyway. > > Any help > > > -----Original Message----- > From: Paul Omamogho [mailto:omamogho@icloud.com] > Sent: Monday, December 15, 2014 2:45 PM > To: users@cloudstack.apache.org > Subject: Re: Virtual Router - Strange issue - Cloud-init > > Have you checked to ensure the entire VLAN Guest traffic ranges e.g. > 500 - > 550 specified in CS are subsequently tagged? > > >> On 15 Dec 2014, at 18:52, Matthew Midgett > wrote: >> >> Correct that is the way that I have it setup. CS creates a tagged >> network as shown in this example >> http://mirror.charlottecolo.com/cloudstack/xennetwork.jpg >> >> All the VM's can ping its gateway on the router. All the VM can ping >> any public address. The VM's can only ping the VM's on their >> hypervisor where the VR is. >> >> >> >> -----Original Message----- >> From: Paul Omamogho [mailto:omamogho@icloud.com] >> Sent: Monday, December 15, 2014 12:37 PM >> To: users@cloudstack.apache.org >> Subject: Re: Virtual Router - Strange issue - Cloud-init >> >> Hi Matthew, >> >> To my understanding your guest Nic in XenServer and CS should remain >> untagged while the associated VLAN ports in your Switch should be tagged. >> >> Cheers, >> >> Paul >> >>> On 15 Dec 2014, at 16:44, Matthew Midgett >> wrote: >>> >>> I have advanced shared networking with a public address being >>> assigned to each VM. The VR doesn't show having a public IP this way >>> but the guest IP is a public one. Should I change the Vlans and >>> trunks to having a private address and let the VR setup the default >>> networking with a private range and let it do NAT the way that ACS >>> was > designed? >>> >>> Just tried to ping the VR again from a VM on another host and I can't. >>> I can ping the gateway which means the Vlans and trunking and >>> cabling are fine. Can ping the VR from the public IP all the time. >>> Also can ping the VR from both hypervisors using it's public. >>> >>> If 2 VM and VR are on the same host then pings work between them. >>> >>> Just logged into the VR and I can ping the address of the VM's that >>> are on the same host but not the one on the other host. >>> >>> >>> -----Original Message----- >>> From: Matthew Midgett [mailto:cloudstck@trick-solutions.com.INVALID] >>> Sent: Monday, December 15, 2014 8:47 AM >>> To: users@cloudstack.apache.org >>> Subject: Virtual Router - Strange issue - Cloud-init >>> >>> ACS 4.4.2 and Xenserver 6.2 >>> >>> >>> >>> When I try to deploy a template that is using cloud-ini and the VR >>> is on the other the VM can't connect to the meta data. When the VR >>> and VM is on the same host it works with no issue and now that I >>> have migrated the VR back a forth a few times it not an issue until >>> the VM reboots and then it can't connect to the VR unless it's on >>> the same host. DHCP is working fine no matter what host the VR is >>> on. What could be causing this? Even when I can't get the meta data >>> I can ping the VR so I don't think it's a physical network issue. >>> >>> >>> >>> Tested getting meta data like this curl >>> http://VR-IP/latest/meta-data/ >>> >>> >>> >>> Matthew Midgett >>> >>> >> >> > >