Mailing-List: contact users-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@cloudstack.apache.org
MIME-Version: 1.0
Date: Wed, 11 Nov 2015 18:28:56 +0800
Message-ID: 
 <CAOJ8eeCquSYk+1c113_DwYnNm4jSjT80D=uzmPqtmDCxip_4qQ@mail.gmail.com>
Subject: Console VM works when host iptables off
From: Syahrul Sazli Shaharir <sazli@pulasan.my>
To: users@cloudstack.apache.org
Content-Type: text/plain; charset=UTF-8

Hi,

I'm running CS 4.5.2 on CentOS 6.7 , and just set up advanced
networking, as follows:-

Public - Guest (Trunk port)
eth0:304/cloudbr0 (VLAN304): 192.168.30.32/27
eth0.280 (VLAN280): assigned to guests ( 192.168.28.0/24 )

Storage (Access port)
cloudbr1 (VLAN281): 10.1.28.0/24

Management (Access port)
cloudbr2 (VLAN282): 10.2.28.0/24

All goes well, except for the System VM public IP ( 192.168.30.32/27
). No one outside of the host running the VMs able to connect or ping
to it. This includes each instance's console function, which requires
direct connection from the browser to the console VM public IP ( in
this case auto-assigned to 192.168.30.41/27 ).

However, if I turn off iptables on the host running the console VM, I
am able to ping / connect to it and get console function working in
the UI.

Any clues to what I should check/tweak?

Thanks.

-- 
--sazli