Defining Isolated Guest Network on ACS

[Özhan Rüzgar Karaman <or...@gmail.com>]

Hi;
I am new to Advanced Networking in ACS, i like to ask a question i am stuck
at setting up the network config below. I am using ACS 4.6.0.

My plan is to give 2 different ip addresses to each vm:

1) First ip is real ip who is responsible to connect vm to internet (Here
we do not want any nat operations so we plan to use direct real ip, we also
like to use Security Groups to give vm owners firewall service from ACS, we
also like to calculate network usage for this network interface)
2) Second ip is virtual ip(192.168.x.x) which is for shared network access
for each vm and its only responsible for data access between virtual
machines. Each vm could talk with each other without any calculation on
network usage)

I made the first setup without any problem. For the second setup/ip i have
some problems. I create a new shared guest network from network offerings
section and enabled it but i could not add this new offering from Networks
>> Add Guest Network section when i try to add new network only "Offering
for Shared Security Group enabled networks" option is selectable, there are
no other available options for Network Offering Section, so i could not
choose isolated or shared guest network section

I think i missed something, i suspect that because i enabled Security
Groups on first advanced network setup system did not allow me to add new
network interface.

So what is the required or correct way to enable second ip which mentioned
above ?

Thanks for all responses.

Özhan

Re: Defining Isolated Guest Network on ACS

[Summer nguyen <su...@gmail.com>]

Hi,
as I understand, You miss the Network tag when creating Network offering

[image: Inline image 1]


You need to tag which network this network offering shoud use when creating
shared network.





On Thu, Dec 24, 2015 at 8:12 PM, Nux! <nu...@li.nux.ro> wrote:

> Özhan,
>
> As far as I know you can't mix and match like that.
> If you go for Security Groups then you cannot add another to an instance
> using that.
> Advanced zone with Security Groups (SG) and Basic Zone (which is very
> similar) do not allow using multiple networks.
>
> If you want anything like this then go for a pure Advanced zone, there you
> might be able to add a shared network with public IPs (but without SG) and
> attach it to instances in addition to other networks.
>
> HTH
> Lucian
>
> --
> Sent from the Delta quadrant using Borg technology!
>
> Nux!
> www.nux.ro
>
> ----- Original Message -----
> > From: "Özhan Rüzgar Karaman" <or...@gmail.com>
> > To: users@cloudstack.apache.org
> > Sent: Thursday, 24 December, 2015 12:37:28
> > Subject: Defining Isolated Guest Network on ACS
>
> > Hi;
> > I am new to Advanced Networking in ACS, i like to ask a question i am
> stuck
> > at setting up the network config below. I am using ACS 4.6.0.
> >
> > My plan is to give 2 different ip addresses to each vm:
> >
> > 1) First ip is real ip who is responsible to connect vm to internet (Here
> > we do not want any nat operations so we plan to use direct real ip, we
> also
> > like to use Security Groups to give vm owners firewall service from ACS,
> we
> > also like to calculate network usage for this network interface)
> > 2) Second ip is virtual ip(192.168.x.x) which is for shared network
> access
> > for each vm and its only responsible for data access between virtual
> > machines. Each vm could talk with each other without any calculation on
> > network usage)
> >
> > I made the first setup without any problem. For the second setup/ip i
> have
> > some problems. I create a new shared guest network from network offerings
> > section and enabled it but i could not add this new offering from
> Networks
> >>> Add Guest Network section when i try to add new network only "Offering
> > for Shared Security Group enabled networks" option is selectable, there
> are
> > no other available options for Network Offering Section, so i could not
> > choose isolated or shared guest network section
> >
> > I think i missed something, i suspect that because i enabled Security
> > Groups on first advanced network setup system did not allow me to add new
> > network interface.
> >
> > So what is the required or correct way to enable second ip which
> mentioned
> > above ?
> >
> > Thanks for all responses.
> >
> > Özhan
>



-- 
Name: Nguyen Huu Ha
HCMC University of Technology
Faculty of  Computer Science & Engineering
Tel: 01699987252
Email: summer0nguyen@gmail.com
Y!h: summer.inthesun

Re: Defining Isolated Guest Network on ACS

[Nux! <nu...@li.nux.ro>]

Özhan,

As far as I know you can't mix and match like that.
If you go for Security Groups then you cannot add another to an instance using that.
Advanced zone with Security Groups (SG) and Basic Zone (which is very similar) do not allow using multiple networks.

If you want anything like this then go for a pure Advanced zone, there you might be able to add a shared network with public IPs (but without SG) and attach it to instances in addition to other networks.

HTH
Lucian

--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro

----- Original Message -----
> From: "Özhan Rüzgar Karaman" <or...@gmail.com>
> To: users@cloudstack.apache.org
> Sent: Thursday, 24 December, 2015 12:37:28
> Subject: Defining Isolated Guest Network on ACS

> Hi;
> I am new to Advanced Networking in ACS, i like to ask a question i am stuck
> at setting up the network config below. I am using ACS 4.6.0.
> 
> My plan is to give 2 different ip addresses to each vm:
> 
> 1) First ip is real ip who is responsible to connect vm to internet (Here
> we do not want any nat operations so we plan to use direct real ip, we also
> like to use Security Groups to give vm owners firewall service from ACS, we
> also like to calculate network usage for this network interface)
> 2) Second ip is virtual ip(192.168.x.x) which is for shared network access
> for each vm and its only responsible for data access between virtual
> machines. Each vm could talk with each other without any calculation on
> network usage)
> 
> I made the first setup without any problem. For the second setup/ip i have
> some problems. I create a new shared guest network from network offerings
> section and enabled it but i could not add this new offering from Networks
>>> Add Guest Network section when i try to add new network only "Offering
> for Shared Security Group enabled networks" option is selectable, there are
> no other available options for Network Offering Section, so i could not
> choose isolated or shared guest network section
> 
> I think i missed something, i suspect that because i enabled Security
> Groups on first advanced network setup system did not allow me to add new
> network interface.
> 
> So what is the required or correct way to enable second ip which mentioned
> above ?
> 
> Thanks for all responses.
> 
> Özhan