You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cloudstack.apache.org by "Jayapal Reddy (JIRA)" <ji...@apache.org> on 2013/05/17 20:57:15 UTC
[jira] [Commented] (CLOUDSTACK-2386) SRX:F5: fail to set firewall
rule for icmp protocol
[ https://issues.apache.org/jira/browse/CLOUDSTACK-2386?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13660949#comment-13660949 ]
Jayapal Reddy commented on CLOUDSTACK-2386:
-------------------------------------------
patch is in review board https://reviews.apache.org/r/11223/
> SRX:F5: fail to set firewall rule for icmp protocol
> ----------------------------------------------------
>
> Key: CLOUDSTACK-2386
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2386
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the default.)
> Components: Network Controller
> Affects Versions: 4.2.0
> Reporter: sadhu suresh
> Assignee: Jayapal Reddy
> Priority: Critical
> Fix For: 4.2.0
>
> Attachments: management-server.rar
>
>
> steps:
> 1. create a network offering with src and F5 in line mone
> 2.create a sharednetwork using above NO
> 3.deploy a vm using above shared network
> 4.acquire an IP and enabled static nat
> 5.configure the firewall on tcp protocol on 80 port
> 6.configure the firewall on ICMP protocol o
> actual result:
> able to configure the firewall on tcp protocol but fail to configure the firewall on ICMP protocol
> output of show firewall command for above acquired IP
> root# show firewall filter untrust
> term 10-147-49-130-8 {
> from {
> source-address {
> 0.0.0.0/0;
> }
> destination-address {
> 10.147.49.130/32;
> }
> protocol tcp;
> destination-port 80-80;
> }
> then {
> count 10-147-49-130-i;
> accept;
> }
> }
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira