You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Technology Mail <te...@gmail.com> on 2023/10/04 09:34:47 UTC

Can I create Advanced zone using LAN

*Hello,*

Can I create Advanced zone using my only LAN network?

Internet traffic come from my LAN gateway. no any public ip on host kvm.

LAN: 172.22.0.1/22

kvm LAN: ens9f0np0
Bridge : cloudbr0

*cat ifcfg-ens9f0np0*
DEVICE=ens9f0np0
ONBOOT=yes
BRIDGE=cloudbr0
UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e

*cat ifcfg-cloudbr0*
DEVICE="cloudbr0"
TYPE=BRIDGE
UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
ONBOOT=yes
BOOTPROTO=static
IPADDR="172.22.0.11"
NETMASK="255.255.252.0"
GATEWAY="172.22.0.1"
DNS1="8.8.8.8"
DNS2="8.8.4.4"

I am create Adv zone(without SG) with above all details but my instance 
not internet ping, my virtual router, ssvm & cpvm can ping to internet.

Guest CIDR:     172.22.0.1/22

Public : 172.22.0.61-172.22.0.100 (vlan://untagged)

POD (vlan://untagged)
172.22.0.1
255.255.252.0
172.22.0.101 172.22.0.110

Guest : 20-50 vLANID

Which config needed or which my wrong?

-- 

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter 
<https://twitter.com/technologyrss1> | YouTube 
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn 
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com

Re: Can I create Advanced zone using LAN

Posted by Jayanth Reddy <ja...@gmail.com>.
Hello,

Thank you for the response. In this case if your bridge is cloudbr0, then
your new bridge will be created and your physical interface that will be
tagged with VLAN 20 for example "ens9f0np0.20" and the traffic for the IP
range 172.22.0.1/22 might be unknown on that VLAN. Your guest bridge will
be as follows i.e.,

brens9f0np0-20 <bridge>
vnet1 <VM's tap interface>
ens9f0np0.20@ens9f0np0 <logical tagged interface>

So your guest traffic will be tagged when it leaves the hypervisor. Maybe
tweak something on the switch?

Thanks,
Jayanth Reddy

On Wed, Oct 4, 2023 at 5:46 PM Technology Mail <te...@gmail.com>
wrote:

> yes, your first think is right,
>
> 2nd I am using only one physical interface and all network tag is
> *cloudbr0*, and I put vLANID 20-50 this is mandatory field so I input
> this, just it.
>
> Thanks.
> On 10/4/2023 6:09 PM, Jayanth Reddy wrote:
>
> Hello,
>
> If I understand correctly, you've a network where we can consider it as a
> "management network" for your hosts. I believe your expectation is to have
> your VMs attached onto the same management network on the bridge "cloudbr0"
> so that you'll get access via your gateway 172.22.0.1.
>
> I don't think Cloudstack has provision to attach the guest user VMs to the
> management bridge "cloudbr0". In your current test case, since you have
> Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
> would be making use of your bridge for the guestnet defined in the physical
> network and tag the available VLAN from range 20 to 50. Do you happen to
> have a different bridge for the guest networks and are you tagging the
> traffic?
>
> Thanks,
> Jayanth Reddy
>
>
> On Wed, Oct 4, 2023 at 3:05 PM Technology Mail <te...@gmail.com> <te...@gmail.com>
> wrote:
>
>
> *Hello,*
>
> Can I create Advanced zone using my only LAN network?
>
> Internet traffic come from my LAN gateway. no any public ip on host kvm.
>
> LAN: 172.22.0.1/22
>
> kvm LAN: ens9f0np0
> Bridge : cloudbr0
>
> *cat ifcfg-ens9f0np0*
> DEVICE=ens9f0np0
> ONBOOT=yes
> BRIDGE=cloudbr0
> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>
> *cat ifcfg-cloudbr0*
> DEVICE="cloudbr0"
> TYPE=BRIDGE
> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
> ONBOOT=yes
> BOOTPROTO=static
> IPADDR="172.22.0.11"
> NETMASK="255.255.252.0"
> GATEWAY="172.22.0.1"
> DNS1="8.8.8.8"
> DNS2="8.8.4.4"
>
> I am create Adv zone(without SG) with above all details but my instance
> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>
> Guest CIDR:     172.22.0.1/22
>
> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>
> POD (vlan://untagged)
> 172.22.0.1
> 255.255.252.0
> 172.22.0.101 172.22.0.110
>
> Guest : 20-50 vLANID
>
> Which config needed or which my wrong?
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
>
> ------------------------------------------------------------------------
>
> *Facebook <https://www.facebook.com/TechnologyRSS> <https://www.facebook.com/TechnologyRSS> | Twitter<https://twitter.com/technologyrss1> <https://twitter.com/technologyrss1> | YouTube<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn<https://www.linkedin.com/company/technologyrss/> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :* support.admin@technologyrss.com
>
> *Web :* www.technologyrss.com
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
> ------------------------------
>
> *Facebook <https://www.facebook.com/TechnologyRSS> | Twitter
> <https://twitter.com/technologyrss1> | YouTube
> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn
> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :* support.admin@technologyrss.com
>
> *Web :* www.technologyrss.com
>

Re: Can I create Advanced zone using LAN

Posted by Technology rss <te...@gmail.com>.
I skip this test using vLANID.

Now I test as below:

https://prnt.sc/uWF76ofrzBFC
https://prnt.sc/QCXKzF61ze5X
https://prnt.sc/Cn3jbKIel-Jk
https://prnt.sc/JOdqBQalfg0d
https://prnt.sc/88x5IAP_2ojp
https://prnt.sc/_zPRZPZ0cYRD


POD
172.22.0.1
255.255.252.0
172.22.0.51 172.22.0.60

Guest    : vlan://untagged
172.22.0.1
255.255.252.0
172.22.0.61 172.22.0.100

Host
172.22.0.11
root
********

KVM network is below

+++++++++++++++++++++++

[root@kvm network-scripts]# cat ifcfg-ens9f0np0
DEVICE=ens9f0np0
HWADDR=bc:97:e1:1c:2b:f8
ONBOOT=yes
BRIDGE=cloudbr0
UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e


[root@kvm network-scripts]# cat ifcfg-cloudbr0
DEVICE="cloudbr0"
TYPE=BRIDGE
UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
ONBOOT=yes
BOOTPROTO=static
IPADDR="172.22.0.11"
NETMASK="255.255.252.0"
GATEWAY="172.22.0.1"
DNS1="8.8.8.8"
DNS2="8.8.4.4"

+++++++++++++++++++++

Now I get vm internet and ping to my local pc but not inbound ok, Like I
try to ping from my laptop

Problem Now:

1. VM to VM not ping
2. Can't find SG settings for allow Ingress rule


----

Alamin
On 10/4/2023 7:07 PM, Wei ZHOU wrote:

You need to set the ports on your router to trunk mode (or hybrid mode
to allow vlan 20-50).

If you cannot configure the route, please use Shared networks (in basic
zone or advanced zone) with vlan://untagged.

-Wei

On Wed, 4 Oct 2023 at 14:17, Technology Mail
<te...@gmail.com> <te...@gmail.com>
wrote:


yes, your first think is right,

2nd I am using only one physical interface and all network tag is
*cloudbr0*, and I put vLANID 20-50 this is mandatory field so I input
this, just it.

Thanks.

On 10/4/2023 6:09 PM, Jayanth Reddy wrote:

Hello,

If I understand correctly, you've a network where we can consider it as a
"management network" for your hosts. I believe your expectation is to

have

your VMs attached onto the same management network on the bridge

"cloudbr0"

so that you'll get access via your gateway 172.22.0.1.

I don't think Cloudstack has provision to attach the guest user VMs to

the

management bridge "cloudbr0". In your current test case, since you have
Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
would be making use of your bridge for the guestnet defined in the

physical

network and tag the available VLAN from range 20 to 50. Do you happen to
have a different bridge for the guest networks and are you tagging the
traffic?

Thanks,
Jayanth Reddy


On Wed, Oct 4, 2023 at 3:05 PM Technology Mail<

technologyrss.mail@gmail.com>

wrote:


*Hello,*

Can I create Advanced zone using my only LAN network?

Internet traffic come from my LAN gateway. no any public ip on host kvm.

LAN: 172.22.0.1/22

kvm LAN: ens9f0np0
Bridge : cloudbr0

*cat ifcfg-ens9f0np0*
DEVICE=ens9f0np0
ONBOOT=yes
BRIDGE=cloudbr0
UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e

*cat ifcfg-cloudbr0*
DEVICE="cloudbr0"
TYPE=BRIDGE
UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
ONBOOT=yes
BOOTPROTO=static
IPADDR="172.22.0.11"
NETMASK="255.255.252.0"
GATEWAY="172.22.0.1"
DNS1="8.8.8.8"
DNS2="8.8.4.4"

I am create Adv zone(without SG) with above all details but my instance
not internet ping, my virtual router, ssvm & cpvm can ping to internet.

Guest CIDR:     172.22.0.1/22

Public : 172.22.0.61-172.22.0.100 (vlan://untagged)

POD (vlan://untagged)
172.22.0.1
255.255.252.0
172.22.0.101 172.22.0.110

Guest : 20-50 vLANID

Which config needed or which my wrong?

--

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook<https://www.facebook.com/TechnologyRSS>
<https://www.facebook.com/TechnologyRSS>  |
Twitter<https://twitter.com/technologyrss1>
<https://twitter.com/technologyrss1>  |
YouTube<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  |
LinkedIn<https://www.linkedin.com/company/technologyrss/>
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :*support.admin@technologyrss.com

*Web :*www.technologyrss.com

--

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS>
<https://www.facebook.com/TechnologyRSS> |
Twitter<https://twitter.com/technologyrss1>
<https://twitter.com/technologyrss1> |
YouTube<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> |
LinkedIn<https://www.linkedin.com/company/technologyrss/>
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com

-- 

*Thanks & Regards.*

*Support Admin*
------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter
<https://twitter.com/technologyrss1> | YouTube
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com

Re: Can I create Advanced zone using LAN

Posted by Technology Mail <te...@gmail.com>.
Please see my work flow:

https://prnt.sc/uWF76ofrzBFC
https://prnt.sc/QCXKzF61ze5X
https://prnt.sc/Cn3jbKIel-Jk
https://prnt.sc/JOdqBQalfg0d
https://prnt.sc/88x5IAP_2ojp
https://prnt.sc/_zPRZPZ0cYRD


POD
172.22.0.1
255.255.252.0
172.22.0.51 172.22.0.60

Guest    : vlan://untagged
172.22.0.1
255.255.252.0
172.22.0.61 172.22.0.100

Host
172.22.0.11
root
********

KVM network is below

+++++++++++++++++++++++

[root@kvm network-scripts]# cat ifcfg-ens9f0np0
DEVICE=ens9f0np0
HWADDR=bc:97:e1:1c:2b:f8
ONBOOT=yes
BRIDGE=cloudbr0
UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e


[root@kvm network-scripts]# cat ifcfg-cloudbr0
DEVICE="cloudbr0"
TYPE=BRIDGE
UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
ONBOOT=yes
BOOTPROTO=static
IPADDR="172.22.0.11"
NETMASK="255.255.252.0"
GATEWAY="172.22.0.1"
DNS1="8.8.8.8"
DNS2="8.8.4.4"

+++++++++++++++++++++

On 10/9/2023 1:08 PM, Wei ZHOU wrote:
> Hi,
>
> Can you give more information ?
>
> - zone type
> - network type
> - hypervisor type
> - isolated method and vlan id
> - network/nic/ip information of vms
>
> Kind regards,
> Wei
>
> On Mon, 9 Oct 2023 at 06:56, Technology Mail 
> <te...@gmail.com> wrote:
>
>     ok,
>     I needed another function like add network to every vm for vm to
>     vm communication (30.30.0.0/22 <http://30.30.0.0/22>)
>     how to create it?
>
>     ---
>     Amin
>
>
-- 

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter 
<https://twitter.com/technologyrss1> | YouTube 
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn 
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com

Re: Can I create Advanced zone using LAN

Posted by Wei ZHOU <us...@gmail.com>.
Hi,

Can you give more information ?

- zone type
- network type
- hypervisor type
- isolated method and vlan id
- network/nic/ip information of vms

Kind regards,
Wei

On Mon, 9 Oct 2023 at 06:56, Technology Mail <te...@gmail.com>
wrote:

> ok,
> I needed another function like add network to every vm for vm to vm
> communication (30.30.0.0/22)
> how to create it?
>
> ---
> Amin
>
>

Re: Can I create Advanced zone using LAN

Posted by Technology Mail <te...@gmail.com>.
ok,
I needed another function like add network to every vm for vm to vm 
communication (30.30.0.0/22)
how to create it?

---
Amin

On 10/4/2023 10:57 PM, Wei ZHOU wrote:
> It looks the vm is not associated to any security groups. you need to 
> update the vm with security groups.
>
> -Wei
>
> Technology Mail <te...@gmail.com> 于 2023年10月4日周三 
> 下午5:48写道:
>
>     I skip this test using vLANID.
>
>     Now I test as below:
>
>     https://prnt.sc/uWF76ofrzBFC
>     https://prnt.sc/QCXKzF61ze5X
>     https://prnt.sc/Cn3jbKIel-Jk
>     https://prnt.sc/JOdqBQalfg0d
>     https://prnt.sc/88x5IAP_2ojp
>     https://prnt.sc/_zPRZPZ0cYRD
>
>
>     POD
>     172.22.0.1
>     255.255.252.0
>     172.22.0.51 172.22.0.60
>
>     Guest    : vlan://untagged
>     172.22.0.1
>     255.255.252.0
>     172.22.0.61 172.22.0.100
>
>     Host
>     172.22.0.11
>     root
>     ********
>
>     KVM network is below
>
>     +++++++++++++++++++++++
>
>     [root@kvm network-scripts]# cat ifcfg-ens9f0np0
>     DEVICE=ens9f0np0
>     HWADDR=bc:97:e1:1c:2b:f8
>     ONBOOT=yes
>     BRIDGE=cloudbr0
>     UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>
>
>     [root@kvm network-scripts]# cat ifcfg-cloudbr0
>     DEVICE="cloudbr0"
>     TYPE=BRIDGE
>     UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
>     ONBOOT=yes
>     BOOTPROTO=static
>     IPADDR="172.22.0.11"
>     NETMASK="255.255.252.0"
>     GATEWAY="172.22.0.1"
>     DNS1="8.8.8.8"
>     DNS2="8.8.4.4"
>
>     +++++++++++++++++++++
>
>     Now I get access internet from vm but not inbound ok, Like I try
>     to ping from my laptop to vm, its not ok.
>     https://prnt.sc/Gpzv4TxpwxIm
>
>     Also I can't see SG settings for Ingress rule.
>
>     Problem now :
>
>     1. vm to vm not ping
>     2. Can't find SG settings
>
>     --Alamin
>
>     Thank you.
>
>     On 10/4/2023 7:07 PM, Wei ZHOU wrote:
>>     You need to set the ports on your router to trunk mode (or hybrid mode
>>     to allow vlan 20-50).
>>
>>     If you cannot configure the route, please use Shared networks (in basic
>>     zone or advanced zone) with vlan://untagged.
>>
>>     -Wei
>>
>>     On Wed, 4 Oct 2023 at 14:17, Technology Mail<te...@gmail.com>  <ma...@gmail.com>
>>     wrote:
>>
>>>     yes, your first think is right,
>>>
>>>     2nd I am using only one physical interface and all network tag is
>>>     *cloudbr0*, and I put vLANID 20-50 this is mandatory field so I input
>>>     this, just it.
>>>
>>>     Thanks.
>>>
>>>     On 10/4/2023 6:09 PM, Jayanth Reddy wrote:
>>>>     Hello,
>>>>
>>>>     If I understand correctly, you've a network where we can consider it as a
>>>>     "management network" for your hosts. I believe your expectation is to
>>>     have
>>>>     your VMs attached onto the same management network on the bridge
>>>     "cloudbr0"
>>>>     so that you'll get access via your gateway 172.22.0.1.
>>>>
>>>>     I don't think Cloudstack has provision to attach the guest user VMs to
>>>     the
>>>>     management bridge "cloudbr0". In your current test case, since you have
>>>>     Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
>>>>     would be making use of your bridge for the guestnet defined in the
>>>     physical
>>>>     network and tag the available VLAN from range 20 to 50. Do you happen to
>>>>     have a different bridge for the guest networks and are you tagging the
>>>>     traffic?
>>>>
>>>>     Thanks,
>>>>     Jayanth Reddy
>>>>
>>>>
>>>>     On Wed, Oct 4, 2023 at 3:05 PM Technology Mail<
>>>     technologyrss.mail@gmail.com>
>>>>     wrote:
>>>>
>>>>>     *Hello,*
>>>>>
>>>>>     Can I create Advanced zone using my only LAN network?
>>>>>
>>>>>     Internet traffic come from my LAN gateway. no any public ip on host kvm.
>>>>>
>>>>>     LAN:172.22.0.1/22  <http://172.22.0.1/22>
>>>>>
>>>>>     kvm LAN: ens9f0np0
>>>>>     Bridge : cloudbr0
>>>>>
>>>>>     *cat ifcfg-ens9f0np0*
>>>>>     DEVICE=ens9f0np0
>>>>>     ONBOOT=yes
>>>>>     BRIDGE=cloudbr0
>>>>>     UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>>>>>
>>>>>     *cat ifcfg-cloudbr0*
>>>>>     DEVICE="cloudbr0"
>>>>>     TYPE=BRIDGE
>>>>>     UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
>>>>>     ONBOOT=yes
>>>>>     BOOTPROTO=static
>>>>>     IPADDR="172.22.0.11"
>>>>>     NETMASK="255.255.252.0"
>>>>>     GATEWAY="172.22.0.1"
>>>>>     DNS1="8.8.8.8"
>>>>>     DNS2="8.8.4.4"
>>>>>
>>>>>     I am create Adv zone(without SG) with above all details but my instance
>>>>>     not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>>>>>
>>>>>     Guest CIDR:172.22.0.1/22  <http://172.22.0.1/22>
>>>>>
>>>>>     Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>>>>>
>>>>>     POD (vlan://untagged)
>>>>>     172.22.0.1
>>>>>     255.255.252.0
>>>>>     172.22.0.101 172.22.0.110
>>>>>
>>>>>     Guest : 20-50 vLANID
>>>>>
>>>>>     Which config needed or which my wrong?
>>>>>
>>>>>     --
>>>>>
>>>>>     *Thanks & Regards.*
>>>>>
>>>>>     *Support Admin*
>>>>>
>>>>>     ------------------------------------------------------------------------
>>>>>
>>>>>     *Facebook<https://www.facebook.com/TechnologyRSS>  <https://www.facebook.com/TechnologyRSS>   | Twitter
>>>>>     <https://twitter.com/technologyrss1>  <https://twitter.com/technologyrss1>   | YouTube
>>>>>     <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>   | LinkedIn
>>>>>     <https://www.linkedin.com/company/technologyrss/>  <https://www.linkedin.com/company/technologyrss/>*
>>>>>
>>>>>     *Address : *116/1 West Malibagh, D. I. T Road
>>>>>
>>>>>     Dhaka-1217, Bangladesh
>>>>>
>>>>>     *Mob :* +88 01716915504
>>>>>
>>>>>     *Email :*support.admin@technologyrss.com
>>>>>
>>>>>     *Web :*www.technologyrss.com  <http://www.technologyrss.com>
>>>>>
>>>     --
>>>
>>>     *Thanks & Regards.*
>>>
>>>     *Support Admin*
>>>
>>>     ------------------------------------------------------------------------
>>>
>>>     *Facebook<https://www.facebook.com/TechnologyRSS>  <https://www.facebook.com/TechnologyRSS>  | Twitter
>>>     <https://twitter.com/technologyrss1>  <https://twitter.com/technologyrss1>  | YouTube
>>>     <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  | LinkedIn
>>>     <https://www.linkedin.com/company/technologyrss/>  <https://www.linkedin.com/company/technologyrss/>*
>>>
>>>     *Address : *116/1 West Malibagh, D. I. T Road
>>>
>>>     Dhaka-1217, Bangladesh
>>>
>>>     *Mob :* +88 01716915504
>>>
>>>     *Email :*support.admin@technologyrss.com
>>>
>>>     *Web :*www.technologyrss.com  <http://www.technologyrss.com>
>>>
>     -- 
>
>     *Thanks & Regards.*
>
>     *Support Admin*
>
>     ------------------------------------------------------------------------
>
>     *Facebook <https://www.facebook.com/TechnologyRSS> | Twitter
>     <https://twitter.com/technologyrss1> | YouTube
>     <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> |
>     LinkedIn <https://www.linkedin.com/company/technologyrss/>*
>
>     *Address : *116/1 West Malibagh, D. I. T Road
>
>     Dhaka-1217, Bangladesh
>
>     *Mob :* +88 01716915504
>
>     *Email :* support.admin@technologyrss.com
>
>     *Web :* www.technologyrss.com <http://www.technologyrss.com>
>
-- 

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter 
<https://twitter.com/technologyrss1> | YouTube 
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn 
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com

Re: Can I create Advanced zone using LAN

Posted by Wei ZHOU <us...@gmail.com>.
It looks the vm is not associated to any security groups. you need to
update the vm with security groups.

-Wei

Technology Mail <te...@gmail.com> 于 2023年10月4日周三 下午5:48写道:

> I skip this test using vLANID.
>
> Now I test as below:
>
> https://prnt.sc/uWF76ofrzBFC
> https://prnt.sc/QCXKzF61ze5X
> https://prnt.sc/Cn3jbKIel-Jk
> https://prnt.sc/JOdqBQalfg0d
> https://prnt.sc/88x5IAP_2ojp
> https://prnt.sc/_zPRZPZ0cYRD
>
>
> POD
> 172.22.0.1
> 255.255.252.0
> 172.22.0.51 172.22.0.60
>
> Guest    : vlan://untagged
> 172.22.0.1
> 255.255.252.0
> 172.22.0.61 172.22.0.100
>
> Host
> 172.22.0.11
> root
> ********
>
> KVM network is below
>
> +++++++++++++++++++++++
>
> [root@kvm network-scripts]# cat ifcfg-ens9f0np0
> DEVICE=ens9f0np0
> HWADDR=bc:97:e1:1c:2b:f8
> ONBOOT=yes
> BRIDGE=cloudbr0
> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>
>
> [root@kvm network-scripts]# cat ifcfg-cloudbr0
> DEVICE="cloudbr0"
> TYPE=BRIDGE
> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
> ONBOOT=yes
> BOOTPROTO=static
> IPADDR="172.22.0.11"
> NETMASK="255.255.252.0"
> GATEWAY="172.22.0.1"
> DNS1="8.8.8.8"
> DNS2="8.8.4.4"
>
> +++++++++++++++++++++
>
> Now I get access internet from vm but not inbound ok, Like I try to ping
> from my laptop to vm, its not ok.
> https://prnt.sc/Gpzv4TxpwxIm
>
> Also I can't see SG settings for Ingress rule.
>
> Problem now :
>
> 1. vm to vm not ping
> 2. Can't find SG settings
>
> --Alamin
>
> Thank you.
> On 10/4/2023 7:07 PM, Wei ZHOU wrote:
>
> You need to set the ports on your router to trunk mode (or hybrid mode
> to allow vlan 20-50).
>
> If you cannot configure the route, please use Shared networks (in basic
> zone or advanced zone) with vlan://untagged.
>
> -Wei
>
> On Wed, 4 Oct 2023 at 14:17, Technology Mail <te...@gmail.com> <te...@gmail.com>
> wrote:
>
>
> yes, your first think is right,
>
> 2nd I am using only one physical interface and all network tag is
> *cloudbr0*, and I put vLANID 20-50 this is mandatory field so I input
> this, just it.
>
> Thanks.
>
> On 10/4/2023 6:09 PM, Jayanth Reddy wrote:
>
> Hello,
>
> If I understand correctly, you've a network where we can consider it as a
> "management network" for your hosts. I believe your expectation is to
>
> have
>
> your VMs attached onto the same management network on the bridge
>
> "cloudbr0"
>
> so that you'll get access via your gateway 172.22.0.1.
>
> I don't think Cloudstack has provision to attach the guest user VMs to
>
> the
>
> management bridge "cloudbr0". In your current test case, since you have
> Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
> would be making use of your bridge for the guestnet defined in the
>
> physical
>
> network and tag the available VLAN from range 20 to 50. Do you happen to
> have a different bridge for the guest networks and are you tagging the
> traffic?
>
> Thanks,
> Jayanth Reddy
>
>
> On Wed, Oct 4, 2023 at 3:05 PM Technology Mail<
>
> technologyrss.mail@gmail.com>
>
> wrote:
>
>
> *Hello,*
>
> Can I create Advanced zone using my only LAN network?
>
> Internet traffic come from my LAN gateway. no any public ip on host kvm.
>
> LAN: 172.22.0.1/22
>
> kvm LAN: ens9f0np0
> Bridge : cloudbr0
>
> *cat ifcfg-ens9f0np0*
> DEVICE=ens9f0np0
> ONBOOT=yes
> BRIDGE=cloudbr0
> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>
> *cat ifcfg-cloudbr0*
> DEVICE="cloudbr0"
> TYPE=BRIDGE
> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
> ONBOOT=yes
> BOOTPROTO=static
> IPADDR="172.22.0.11"
> NETMASK="255.255.252.0"
> GATEWAY="172.22.0.1"
> DNS1="8.8.8.8"
> DNS2="8.8.4.4"
>
> I am create Adv zone(without SG) with above all details but my instance
> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>
> Guest CIDR:     172.22.0.1/22
>
> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>
> POD (vlan://untagged)
> 172.22.0.1
> 255.255.252.0
> 172.22.0.101 172.22.0.110
>
> Guest : 20-50 vLANID
>
> Which config needed or which my wrong?
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
>
> ------------------------------------------------------------------------
>
> *Facebook<https://www.facebook.com/TechnologyRSS> <https://www.facebook.com/TechnologyRSS>  | Twitter<https://twitter.com/technologyrss1> <https://twitter.com/technologyrss1>  | YouTube<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  | LinkedIn<https://www.linkedin.com/company/technologyrss/> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :*support.admin@technologyrss.com
>
> *Web :*www.technologyrss.com
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
>
> ------------------------------------------------------------------------
>
> *Facebook <https://www.facebook.com/TechnologyRSS> <https://www.facebook.com/TechnologyRSS> | Twitter<https://twitter.com/technologyrss1> <https://twitter.com/technologyrss1> | YouTube<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn<https://www.linkedin.com/company/technologyrss/> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :* support.admin@technologyrss.com
>
> *Web :* www.technologyrss.com
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
> ------------------------------
>
> *Facebook <https://www.facebook.com/TechnologyRSS> | Twitter
> <https://twitter.com/technologyrss1> | YouTube
> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn
> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :* support.admin@technologyrss.com
>
> *Web :* www.technologyrss.com
>

Re: Can I create Advanced zone using LAN

Posted by Technology Mail <te...@gmail.com>.
I skip this test using vLANID.

Now I test as below:

https://prnt.sc/uWF76ofrzBFC
https://prnt.sc/QCXKzF61ze5X
https://prnt.sc/Cn3jbKIel-Jk
https://prnt.sc/JOdqBQalfg0d
https://prnt.sc/88x5IAP_2ojp
https://prnt.sc/_zPRZPZ0cYRD


POD
172.22.0.1
255.255.252.0
172.22.0.51 172.22.0.60

Guest    : vlan://untagged
172.22.0.1
255.255.252.0
172.22.0.61 172.22.0.100

Host
172.22.0.11
root
********

KVM network is below

+++++++++++++++++++++++

[root@kvm network-scripts]# cat ifcfg-ens9f0np0
DEVICE=ens9f0np0
HWADDR=bc:97:e1:1c:2b:f8
ONBOOT=yes
BRIDGE=cloudbr0
UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e


[root@kvm network-scripts]# cat ifcfg-cloudbr0
DEVICE="cloudbr0"
TYPE=BRIDGE
UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
ONBOOT=yes
BOOTPROTO=static
IPADDR="172.22.0.11"
NETMASK="255.255.252.0"
GATEWAY="172.22.0.1"
DNS1="8.8.8.8"
DNS2="8.8.4.4"

+++++++++++++++++++++

Now I get access internet from vm but not inbound ok, Like I try to ping 
from my laptop to vm, its not ok.
https://prnt.sc/Gpzv4TxpwxIm

Also I can't see SG settings for Ingress rule.

Problem now :

1. vm to vm not ping
2. Can't find SG settings

--Alamin

Thank you.

On 10/4/2023 7:07 PM, Wei ZHOU wrote:
> You need to set the ports on your router to trunk mode (or hybrid mode
> to allow vlan 20-50).
>
> If you cannot configure the route, please use Shared networks (in basic
> zone or advanced zone) with vlan://untagged.
>
> -Wei
>
> On Wed, 4 Oct 2023 at 14:17, Technology Mail<te...@gmail.com>
> wrote:
>
>> yes, your first think is right,
>>
>> 2nd I am using only one physical interface and all network tag is
>> *cloudbr0*, and I put vLANID 20-50 this is mandatory field so I input
>> this, just it.
>>
>> Thanks.
>>
>> On 10/4/2023 6:09 PM, Jayanth Reddy wrote:
>>> Hello,
>>>
>>> If I understand correctly, you've a network where we can consider it as a
>>> "management network" for your hosts. I believe your expectation is to
>> have
>>> your VMs attached onto the same management network on the bridge
>> "cloudbr0"
>>> so that you'll get access via your gateway 172.22.0.1.
>>>
>>> I don't think Cloudstack has provision to attach the guest user VMs to
>> the
>>> management bridge "cloudbr0". In your current test case, since you have
>>> Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
>>> would be making use of your bridge for the guestnet defined in the
>> physical
>>> network and tag the available VLAN from range 20 to 50. Do you happen to
>>> have a different bridge for the guest networks and are you tagging the
>>> traffic?
>>>
>>> Thanks,
>>> Jayanth Reddy
>>>
>>>
>>> On Wed, Oct 4, 2023 at 3:05 PM Technology Mail<
>> technologyrss.mail@gmail.com>
>>> wrote:
>>>
>>>> *Hello,*
>>>>
>>>> Can I create Advanced zone using my only LAN network?
>>>>
>>>> Internet traffic come from my LAN gateway. no any public ip on host kvm.
>>>>
>>>> LAN: 172.22.0.1/22
>>>>
>>>> kvm LAN: ens9f0np0
>>>> Bridge : cloudbr0
>>>>
>>>> *cat ifcfg-ens9f0np0*
>>>> DEVICE=ens9f0np0
>>>> ONBOOT=yes
>>>> BRIDGE=cloudbr0
>>>> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>>>>
>>>> *cat ifcfg-cloudbr0*
>>>> DEVICE="cloudbr0"
>>>> TYPE=BRIDGE
>>>> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
>>>> ONBOOT=yes
>>>> BOOTPROTO=static
>>>> IPADDR="172.22.0.11"
>>>> NETMASK="255.255.252.0"
>>>> GATEWAY="172.22.0.1"
>>>> DNS1="8.8.8.8"
>>>> DNS2="8.8.4.4"
>>>>
>>>> I am create Adv zone(without SG) with above all details but my instance
>>>> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>>>>
>>>> Guest CIDR:     172.22.0.1/22
>>>>
>>>> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>>>>
>>>> POD (vlan://untagged)
>>>> 172.22.0.1
>>>> 255.255.252.0
>>>> 172.22.0.101 172.22.0.110
>>>>
>>>> Guest : 20-50 vLANID
>>>>
>>>> Which config needed or which my wrong?
>>>>
>>>> --
>>>>
>>>> *Thanks & Regards.*
>>>>
>>>> *Support Admin*
>>>>
>>>> ------------------------------------------------------------------------
>>>>
>>>> *Facebook<https://www.facebook.com/TechnologyRSS>   | Twitter
>>>> <https://twitter.com/technologyrss1>   | YouTube
>>>> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>   | LinkedIn
>>>> <https://www.linkedin.com/company/technologyrss/>*
>>>>
>>>> *Address : *116/1 West Malibagh, D. I. T Road
>>>>
>>>> Dhaka-1217, Bangladesh
>>>>
>>>> *Mob :* +88 01716915504
>>>>
>>>> *Email :*support.admin@technologyrss.com
>>>>
>>>> *Web :*www.technologyrss.com
>>>>
>> --
>>
>> *Thanks & Regards.*
>>
>> *Support Admin*
>>
>> ------------------------------------------------------------------------
>>
>> *Facebook<https://www.facebook.com/TechnologyRSS>  | Twitter
>> <https://twitter.com/technologyrss1>  | YouTube
>> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  | LinkedIn
>> <https://www.linkedin.com/company/technologyrss/>*
>>
>> *Address : *116/1 West Malibagh, D. I. T Road
>>
>> Dhaka-1217, Bangladesh
>>
>> *Mob :* +88 01716915504
>>
>> *Email :*support.admin@technologyrss.com
>>
>> *Web :*www.technologyrss.com
>>
-- 

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter 
<https://twitter.com/technologyrss1> | YouTube 
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn 
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com

Re: Can I create Advanced zone using LAN

Posted by Wei ZHOU <us...@gmail.com>.
You need to set the ports on your router to trunk mode (or hybrid mode
to allow vlan 20-50).

If you cannot configure the route, please use Shared networks (in basic
zone or advanced zone) with vlan://untagged.

-Wei

On Wed, 4 Oct 2023 at 14:17, Technology Mail <te...@gmail.com>
wrote:

> yes, your first think is right,
>
> 2nd I am using only one physical interface and all network tag is
> *cloudbr0*, and I put vLANID 20-50 this is mandatory field so I input
> this, just it.
>
> Thanks.
>
> On 10/4/2023 6:09 PM, Jayanth Reddy wrote:
> > Hello,
> >
> > If I understand correctly, you've a network where we can consider it as a
> > "management network" for your hosts. I believe your expectation is to
> have
> > your VMs attached onto the same management network on the bridge
> "cloudbr0"
> > so that you'll get access via your gateway 172.22.0.1.
> >
> > I don't think Cloudstack has provision to attach the guest user VMs to
> the
> > management bridge "cloudbr0". In your current test case, since you have
> > Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
> > would be making use of your bridge for the guestnet defined in the
> physical
> > network and tag the available VLAN from range 20 to 50. Do you happen to
> > have a different bridge for the guest networks and are you tagging the
> > traffic?
> >
> > Thanks,
> > Jayanth Reddy
> >
> >
> > On Wed, Oct 4, 2023 at 3:05 PM Technology Mail<
> technologyrss.mail@gmail.com>
> > wrote:
> >
> >> *Hello,*
> >>
> >> Can I create Advanced zone using my only LAN network?
> >>
> >> Internet traffic come from my LAN gateway. no any public ip on host kvm.
> >>
> >> LAN: 172.22.0.1/22
> >>
> >> kvm LAN: ens9f0np0
> >> Bridge : cloudbr0
> >>
> >> *cat ifcfg-ens9f0np0*
> >> DEVICE=ens9f0np0
> >> ONBOOT=yes
> >> BRIDGE=cloudbr0
> >> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
> >>
> >> *cat ifcfg-cloudbr0*
> >> DEVICE="cloudbr0"
> >> TYPE=BRIDGE
> >> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
> >> ONBOOT=yes
> >> BOOTPROTO=static
> >> IPADDR="172.22.0.11"
> >> NETMASK="255.255.252.0"
> >> GATEWAY="172.22.0.1"
> >> DNS1="8.8.8.8"
> >> DNS2="8.8.4.4"
> >>
> >> I am create Adv zone(without SG) with above all details but my instance
> >> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
> >>
> >> Guest CIDR:     172.22.0.1/22
> >>
> >> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
> >>
> >> POD (vlan://untagged)
> >> 172.22.0.1
> >> 255.255.252.0
> >> 172.22.0.101 172.22.0.110
> >>
> >> Guest : 20-50 vLANID
> >>
> >> Which config needed or which my wrong?
> >>
> >> --
> >>
> >> *Thanks & Regards.*
> >>
> >> *Support Admin*
> >>
> >> ------------------------------------------------------------------------
> >>
> >> *Facebook<https://www.facebook.com/TechnologyRSS>  | Twitter
> >> <https://twitter.com/technologyrss1>  | YouTube
> >> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  | LinkedIn
> >> <https://www.linkedin.com/company/technologyrss/>*
> >>
> >> *Address : *116/1 West Malibagh, D. I. T Road
> >>
> >> Dhaka-1217, Bangladesh
> >>
> >> *Mob :* +88 01716915504
> >>
> >> *Email :*support.admin@technologyrss.com
> >>
> >> *Web :*www.technologyrss.com
> >>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
>
> ------------------------------------------------------------------------
>
> *Facebook <https://www.facebook.com/TechnologyRSS> | Twitter
> <https://twitter.com/technologyrss1> | YouTube
> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn
> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :* support.admin@technologyrss.com
>
> *Web :* www.technologyrss.com
>

Re: Can I create Advanced zone using LAN

Posted by Jayanth Reddy <ja...@gmail.com>.
Hello,

Thank you for the response. In this case if your bridge is cloudbr0, then
your new bridge will be created and your physical interface that will be
tagged with VLAN 20 for example "ens9f0np0.20" and the traffic for the IP
range 172.22.0.1/22 might be unknown on that VLAN. Your guest bridge will
be as follows i.e.,

brens9f0np0-20 <bridge>
vnet1 <VM's tap interface>
ens9f0np0.20@ens9f0np0 <logical tagged interface>

So your guest traffic will be tagged when it leaves the hypervisor. Maybe
tweak something on the switch?

Thanks,
Jayanth Reddy

On Wed, Oct 4, 2023 at 5:46 PM Technology Mail <te...@gmail.com>
wrote:

> yes, your first think is right,
>
> 2nd I am using only one physical interface and all network tag is
> *cloudbr0*, and I put vLANID 20-50 this is mandatory field so I input
> this, just it.
>
> Thanks.
> On 10/4/2023 6:09 PM, Jayanth Reddy wrote:
>
> Hello,
>
> If I understand correctly, you've a network where we can consider it as a
> "management network" for your hosts. I believe your expectation is to have
> your VMs attached onto the same management network on the bridge "cloudbr0"
> so that you'll get access via your gateway 172.22.0.1.
>
> I don't think Cloudstack has provision to attach the guest user VMs to the
> management bridge "cloudbr0". In your current test case, since you have
> Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
> would be making use of your bridge for the guestnet defined in the physical
> network and tag the available VLAN from range 20 to 50. Do you happen to
> have a different bridge for the guest networks and are you tagging the
> traffic?
>
> Thanks,
> Jayanth Reddy
>
>
> On Wed, Oct 4, 2023 at 3:05 PM Technology Mail <te...@gmail.com> <te...@gmail.com>
> wrote:
>
>
> *Hello,*
>
> Can I create Advanced zone using my only LAN network?
>
> Internet traffic come from my LAN gateway. no any public ip on host kvm.
>
> LAN: 172.22.0.1/22
>
> kvm LAN: ens9f0np0
> Bridge : cloudbr0
>
> *cat ifcfg-ens9f0np0*
> DEVICE=ens9f0np0
> ONBOOT=yes
> BRIDGE=cloudbr0
> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>
> *cat ifcfg-cloudbr0*
> DEVICE="cloudbr0"
> TYPE=BRIDGE
> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
> ONBOOT=yes
> BOOTPROTO=static
> IPADDR="172.22.0.11"
> NETMASK="255.255.252.0"
> GATEWAY="172.22.0.1"
> DNS1="8.8.8.8"
> DNS2="8.8.4.4"
>
> I am create Adv zone(without SG) with above all details but my instance
> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>
> Guest CIDR:     172.22.0.1/22
>
> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>
> POD (vlan://untagged)
> 172.22.0.1
> 255.255.252.0
> 172.22.0.101 172.22.0.110
>
> Guest : 20-50 vLANID
>
> Which config needed or which my wrong?
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
>
> ------------------------------------------------------------------------
>
> *Facebook <https://www.facebook.com/TechnologyRSS> <https://www.facebook.com/TechnologyRSS> | Twitter<https://twitter.com/technologyrss1> <https://twitter.com/technologyrss1> | YouTube<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn<https://www.linkedin.com/company/technologyrss/> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :* support.admin@technologyrss.com
>
> *Web :* www.technologyrss.com
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
> ------------------------------
>
> *Facebook <https://www.facebook.com/TechnologyRSS> | Twitter
> <https://twitter.com/technologyrss1> | YouTube
> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn
> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :* support.admin@technologyrss.com
>
> *Web :* www.technologyrss.com
>

Re: Can I create Advanced zone using LAN

Posted by Technology Mail <te...@gmail.com>.
yes, your first think is right,

2nd I am using only one physical interface and all network tag is 
*cloudbr0*, and I put vLANID 20-50 this is mandatory field so I input 
this, just it.

Thanks.

On 10/4/2023 6:09 PM, Jayanth Reddy wrote:
> Hello,
>
> If I understand correctly, you've a network where we can consider it as a
> "management network" for your hosts. I believe your expectation is to have
> your VMs attached onto the same management network on the bridge "cloudbr0"
> so that you'll get access via your gateway 172.22.0.1.
>
> I don't think Cloudstack has provision to attach the guest user VMs to the
> management bridge "cloudbr0". In your current test case, since you have
> Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
> would be making use of your bridge for the guestnet defined in the physical
> network and tag the available VLAN from range 20 to 50. Do you happen to
> have a different bridge for the guest networks and are you tagging the
> traffic?
>
> Thanks,
> Jayanth Reddy
>
>
> On Wed, Oct 4, 2023 at 3:05 PM Technology Mail<te...@gmail.com>
> wrote:
>
>> *Hello,*
>>
>> Can I create Advanced zone using my only LAN network?
>>
>> Internet traffic come from my LAN gateway. no any public ip on host kvm.
>>
>> LAN: 172.22.0.1/22
>>
>> kvm LAN: ens9f0np0
>> Bridge : cloudbr0
>>
>> *cat ifcfg-ens9f0np0*
>> DEVICE=ens9f0np0
>> ONBOOT=yes
>> BRIDGE=cloudbr0
>> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>>
>> *cat ifcfg-cloudbr0*
>> DEVICE="cloudbr0"
>> TYPE=BRIDGE
>> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
>> ONBOOT=yes
>> BOOTPROTO=static
>> IPADDR="172.22.0.11"
>> NETMASK="255.255.252.0"
>> GATEWAY="172.22.0.1"
>> DNS1="8.8.8.8"
>> DNS2="8.8.4.4"
>>
>> I am create Adv zone(without SG) with above all details but my instance
>> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>>
>> Guest CIDR:     172.22.0.1/22
>>
>> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>>
>> POD (vlan://untagged)
>> 172.22.0.1
>> 255.255.252.0
>> 172.22.0.101 172.22.0.110
>>
>> Guest : 20-50 vLANID
>>
>> Which config needed or which my wrong?
>>
>> --
>>
>> *Thanks & Regards.*
>>
>> *Support Admin*
>>
>> ------------------------------------------------------------------------
>>
>> *Facebook<https://www.facebook.com/TechnologyRSS>  | Twitter
>> <https://twitter.com/technologyrss1>  | YouTube
>> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  | LinkedIn
>> <https://www.linkedin.com/company/technologyrss/>*
>>
>> *Address : *116/1 West Malibagh, D. I. T Road
>>
>> Dhaka-1217, Bangladesh
>>
>> *Mob :* +88 01716915504
>>
>> *Email :*support.admin@technologyrss.com
>>
>> *Web :*www.technologyrss.com
>>
-- 

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter 
<https://twitter.com/technologyrss1> | YouTube 
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn 
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com

Re: Can I create Advanced zone using LAN

Posted by Technology Mail <te...@gmail.com>.
yes, your first think is right,

2nd I am using only one physical interface and all network tag is 
*cloudbr0*, and I put vLANID 20-50 this is mandatory field so I input 
this, just it.

Thanks.

On 10/4/2023 6:09 PM, Jayanth Reddy wrote:
> Hello,
>
> If I understand correctly, you've a network where we can consider it as a
> "management network" for your hosts. I believe your expectation is to have
> your VMs attached onto the same management network on the bridge "cloudbr0"
> so that you'll get access via your gateway 172.22.0.1.
>
> I don't think Cloudstack has provision to attach the guest user VMs to the
> management bridge "cloudbr0". In your current test case, since you have
> Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
> would be making use of your bridge for the guestnet defined in the physical
> network and tag the available VLAN from range 20 to 50. Do you happen to
> have a different bridge for the guest networks and are you tagging the
> traffic?
>
> Thanks,
> Jayanth Reddy
>
>
> On Wed, Oct 4, 2023 at 3:05 PM Technology Mail<te...@gmail.com>
> wrote:
>
>> *Hello,*
>>
>> Can I create Advanced zone using my only LAN network?
>>
>> Internet traffic come from my LAN gateway. no any public ip on host kvm.
>>
>> LAN: 172.22.0.1/22
>>
>> kvm LAN: ens9f0np0
>> Bridge : cloudbr0
>>
>> *cat ifcfg-ens9f0np0*
>> DEVICE=ens9f0np0
>> ONBOOT=yes
>> BRIDGE=cloudbr0
>> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>>
>> *cat ifcfg-cloudbr0*
>> DEVICE="cloudbr0"
>> TYPE=BRIDGE
>> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
>> ONBOOT=yes
>> BOOTPROTO=static
>> IPADDR="172.22.0.11"
>> NETMASK="255.255.252.0"
>> GATEWAY="172.22.0.1"
>> DNS1="8.8.8.8"
>> DNS2="8.8.4.4"
>>
>> I am create Adv zone(without SG) with above all details but my instance
>> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>>
>> Guest CIDR:     172.22.0.1/22
>>
>> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>>
>> POD (vlan://untagged)
>> 172.22.0.1
>> 255.255.252.0
>> 172.22.0.101 172.22.0.110
>>
>> Guest : 20-50 vLANID
>>
>> Which config needed or which my wrong?
>>
>> --
>>
>> *Thanks & Regards.*
>>
>> *Support Admin*
>>
>> ------------------------------------------------------------------------
>>
>> *Facebook<https://www.facebook.com/TechnologyRSS>  | Twitter
>> <https://twitter.com/technologyrss1>  | YouTube
>> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  | LinkedIn
>> <https://www.linkedin.com/company/technologyrss/>*
>>
>> *Address : *116/1 West Malibagh, D. I. T Road
>>
>> Dhaka-1217, Bangladesh
>>
>> *Mob :* +88 01716915504
>>
>> *Email :*support.admin@technologyrss.com
>>
>> *Web :*www.technologyrss.com
>>
-- 

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter 
<https://twitter.com/technologyrss1> | YouTube 
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn 
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com

Re: Can I create Advanced zone using LAN

Posted by Jayanth Reddy <ja...@gmail.com>.
Hello,

If I understand correctly, you've a network where we can consider it as a
"management network" for your hosts. I believe your expectation is to have
your VMs attached onto the same management network on the bridge "cloudbr0"
so that you'll get access via your gateway 172.22.0.1.

I don't think Cloudstack has provision to attach the guest user VMs to the
management bridge "cloudbr0". In your current test case, since you have
Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
would be making use of your bridge for the guestnet defined in the physical
network and tag the available VLAN from range 20 to 50. Do you happen to
have a different bridge for the guest networks and are you tagging the
traffic?

Thanks,
Jayanth Reddy


On Wed, Oct 4, 2023 at 3:05 PM Technology Mail <te...@gmail.com>
wrote:

> *Hello,*
>
> Can I create Advanced zone using my only LAN network?
>
> Internet traffic come from my LAN gateway. no any public ip on host kvm.
>
> LAN: 172.22.0.1/22
>
> kvm LAN: ens9f0np0
> Bridge : cloudbr0
>
> *cat ifcfg-ens9f0np0*
> DEVICE=ens9f0np0
> ONBOOT=yes
> BRIDGE=cloudbr0
> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>
> *cat ifcfg-cloudbr0*
> DEVICE="cloudbr0"
> TYPE=BRIDGE
> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
> ONBOOT=yes
> BOOTPROTO=static
> IPADDR="172.22.0.11"
> NETMASK="255.255.252.0"
> GATEWAY="172.22.0.1"
> DNS1="8.8.8.8"
> DNS2="8.8.4.4"
>
> I am create Adv zone(without SG) with above all details but my instance
> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>
> Guest CIDR:     172.22.0.1/22
>
> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>
> POD (vlan://untagged)
> 172.22.0.1
> 255.255.252.0
> 172.22.0.101 172.22.0.110
>
> Guest : 20-50 vLANID
>
> Which config needed or which my wrong?
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
>
> ------------------------------------------------------------------------
>
> *Facebook <https://www.facebook.com/TechnologyRSS> | Twitter
> <https://twitter.com/technologyrss1> | YouTube
> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn
> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :* support.admin@technologyrss.com
>
> *Web :* www.technologyrss.com
>

Re: Can I create Advanced zone using LAN

Posted by Jayanth Reddy <ja...@gmail.com>.
Hello,

If I understand correctly, you've a network where we can consider it as a
"management network" for your hosts. I believe your expectation is to have
your VMs attached onto the same management network on the bridge "cloudbr0"
so that you'll get access via your gateway 172.22.0.1.

I don't think Cloudstack has provision to attach the guest user VMs to the
management bridge "cloudbr0". In your current test case, since you have
Guest VLAN IDs defined as 20 to 50, I believe your first Guest network
would be making use of your bridge for the guestnet defined in the physical
network and tag the available VLAN from range 20 to 50. Do you happen to
have a different bridge for the guest networks and are you tagging the
traffic?

Thanks,
Jayanth Reddy


On Wed, Oct 4, 2023 at 3:05 PM Technology Mail <te...@gmail.com>
wrote:

> *Hello,*
>
> Can I create Advanced zone using my only LAN network?
>
> Internet traffic come from my LAN gateway. no any public ip on host kvm.
>
> LAN: 172.22.0.1/22
>
> kvm LAN: ens9f0np0
> Bridge : cloudbr0
>
> *cat ifcfg-ens9f0np0*
> DEVICE=ens9f0np0
> ONBOOT=yes
> BRIDGE=cloudbr0
> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>
> *cat ifcfg-cloudbr0*
> DEVICE="cloudbr0"
> TYPE=BRIDGE
> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
> ONBOOT=yes
> BOOTPROTO=static
> IPADDR="172.22.0.11"
> NETMASK="255.255.252.0"
> GATEWAY="172.22.0.1"
> DNS1="8.8.8.8"
> DNS2="8.8.4.4"
>
> I am create Adv zone(without SG) with above all details but my instance
> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>
> Guest CIDR:     172.22.0.1/22
>
> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>
> POD (vlan://untagged)
> 172.22.0.1
> 255.255.252.0
> 172.22.0.101 172.22.0.110
>
> Guest : 20-50 vLANID
>
> Which config needed or which my wrong?
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
>
> ------------------------------------------------------------------------
>
> *Facebook <https://www.facebook.com/TechnologyRSS> | Twitter
> <https://twitter.com/technologyrss1> | YouTube
> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn
> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :* support.admin@technologyrss.com
>
> *Web :* www.technologyrss.com
>

Re: Can I create Advanced zone using LAN

Posted by Technology Mail <te...@gmail.com>.
Isolation method

https://prnt.sc/VJsxWEx_e6jr


On 10/4/2023 3:48 PM, Jithin Raju wrote:
> Hi,
>
> Which guest network type did you deploy? Isolated or shared?
>
> -Jithin
>
> From: Technology Mail<te...@gmail.com>
> Date: Wednesday, 4 October 2023 at 3:05 PM
> To:dev@cloudstack.apache.org  <de...@cloudstack.apache.org>,users@cloudstack.apache.org  <us...@cloudstack.apache.org>
> Subject: Can I create Advanced zone using LAN
> *Hello,*
>
> Can I create Advanced zone using my only LAN network?
>
> Internet traffic come from my LAN gateway. no any public ip on host kvm.
>
> LAN: 172.22.0.1/22
>
> kvm LAN: ens9f0np0
> Bridge : cloudbr0
>
> *cat ifcfg-ens9f0np0*
> DEVICE=ens9f0np0
> ONBOOT=yes
> BRIDGE=cloudbr0
> UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e
>
> *cat ifcfg-cloudbr0*
> DEVICE="cloudbr0"
> TYPE=BRIDGE
> UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
> ONBOOT=yes
> BOOTPROTO=static
> IPADDR="172.22.0.11"
> NETMASK="255.255.252.0"
> GATEWAY="172.22.0.1"
> DNS1="8.8.8.8"
> DNS2="8.8.4.4"
>
> I am create Adv zone(without SG) with above all details but my instance
> not internet ping, my virtual router, ssvm & cpvm can ping to internet.
>
> Guest CIDR:     172.22.0.1/22
>
> Public : 172.22.0.61-172.22.0.100 (vlan://untagged)
>
> POD (vlan://untagged)
> 172.22.0.1
> 255.255.252.0
> 172.22.0.101 172.22.0.110
>
> Guest : 20-50 vLANID
>
> Which config needed or which my wrong?
>
> --
>
> *Thanks & Regards.*
>
> *Support Admin*
>
> ------------------------------------------------------------------------
>
> *Facebook<https://www.facebook.com/TechnologyRSS>  | Twitter
> <https://twitter.com/technologyrss1>  | YouTube
> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  | LinkedIn
> <https://www.linkedin.com/company/technologyrss/>*
>
> *Address : *116/1 West Malibagh, D. I. T Road
>
> Dhaka-1217, Bangladesh
>
> *Mob :* +88 01716915504
>
> *Email :*support.admin@technologyrss.com
>
> *Web :*www.technologyrss.com<http://www.technologyrss.com>
>
>   
>
>
-- 

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter 
<https://twitter.com/technologyrss1> | YouTube 
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn 
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com

Re: Can I create Advanced zone using LAN

Posted by Jithin Raju <ji...@shapeblue.com>.
Hi,

Which guest network type did you deploy? Isolated or shared?

-Jithin

From: Technology Mail <te...@gmail.com>
Date: Wednesday, 4 October 2023 at 3:05 PM
To: dev@cloudstack.apache.org <de...@cloudstack.apache.org>, users@cloudstack.apache.org <us...@cloudstack.apache.org>
Subject: Can I create Advanced zone using LAN
*Hello,*

Can I create Advanced zone using my only LAN network?

Internet traffic come from my LAN gateway. no any public ip on host kvm.

LAN: 172.22.0.1/22

kvm LAN: ens9f0np0
Bridge : cloudbr0

*cat ifcfg-ens9f0np0*
DEVICE=ens9f0np0
ONBOOT=yes
BRIDGE=cloudbr0
UUID=503ef6de-1288-4d2d-a09a-3f7d123bc35e

*cat ifcfg-cloudbr0*
DEVICE="cloudbr0"
TYPE=BRIDGE
UUID=f1173cad-0078-4d9b-8674-6a72e7742ffb
ONBOOT=yes
BOOTPROTO=static
IPADDR="172.22.0.11"
NETMASK="255.255.252.0"
GATEWAY="172.22.0.1"
DNS1="8.8.8.8"
DNS2="8.8.4.4"

I am create Adv zone(without SG) with above all details but my instance
not internet ping, my virtual router, ssvm & cpvm can ping to internet.

Guest CIDR:     172.22.0.1/22

Public : 172.22.0.61-172.22.0.100 (vlan://untagged)

POD (vlan://untagged)
172.22.0.1
255.255.252.0
172.22.0.101 172.22.0.110

Guest : 20-50 vLANID

Which config needed or which my wrong?

--

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter
<https://twitter.com/technologyrss1> | YouTube
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn
<https://www.linkedin.com/company/technologyrss/>*

*Address : *116/1 West Malibagh, D. I. T Road

Dhaka-1217, Bangladesh

*Mob :* +88 01716915504

*Email :* support.admin@technologyrss.com

*Web :* www.technologyrss.com<http://www.technologyrss.com>