You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Ron Gage <ro...@rongage.org.INVALID> on 2024/10/10 23:28:54 UTC

Newbie needs help with a Virtual Router problem

Greetings all from Detroit!

I have a bit of a problem with the virtual router within CS.  In my 
case, it is not forwarding traffic from a guest network to public.

 From the VR cli, I can ping out to google (8.8.8.8) via public without 
issue, I can ping other devices on the public net (e.g. 192.168.0.13 - 
don't judge me) and I can ping devices in the guest network 
(10.0.0.46/24).  You would certainly think that this would be enough.  
It isn't.

 From the device in the guest network (10.0.0.46/24), I can ping the 
VR/network gateway without issue and the VR is set as the default 
gateway (10.0.0.1/24).  Device on guest network cannot ping out past the 
default gateway and thus cannot reach either local infrastructure like 
DNS (192.168.0.13/24) or internet.

 From the VR in the admin portal:

Could I get a suggestion or two on what I might be doing wrong here?

Thanks!

Ron Gage


Re: Newbie needs help with a Virtual Router problem

Posted by Wei ZHOU <us...@gmail.com>.
Welcome to the community !


On Friday, October 11, 2024, Ron Gage <ro...@rongage.org.invalid> wrote:

> Nevermind...  I found the problem.  Egress rules deny all on the VR by
> default.  Gotta allow all to allow traffic.
>
> Sorry to have bothered you all!
>
> Ron Gage
>
>
>
> On 10/10/2024 7:28 PM, Ron Gage wrote:
>
> Greetings all from Detroit!
>
> I have a bit of a problem with the virtual router within CS.  In my case,
> it is not forwarding traffic from a guest network to public.
>
> From the VR cli, I can ping out to google (8.8.8.8) via public without
> issue, I can ping other devices on the public net (e.g. 192.168.0.13 -
> don't judge me) and I can ping devices in the guest network (10.0.0.46/24).
> You would certainly think that this would be enough.  It isn't.
>
> From the device in the guest network (10.0.0.46/24), I can ping the
> VR/network gateway without issue and the VR is set as the default gateway (
> 10.0.0.1/24).  Device on guest network cannot ping out past the default
> gateway and thus cannot reach either local infrastructure like DNS (
> 192.168.0.13/24) or internet.
>
> From the VR in the admin portal:
>
> Could I get a suggestion or two on what I might be doing wrong here?
>
> Thanks!
>
> Ron Gage
>
>
>

Re: Newbie needs help with a Virtual Router problem

Posted by Ron Gage <ro...@rongage.org.INVALID>.
Nevermind...  I found the problem.  Egress rules deny all on the VR by 
default.  Gotta allow all to allow traffic.

Sorry to have bothered you all!

Ron Gage



On 10/10/2024 7:28 PM, Ron Gage wrote:
>
> Greetings all from Detroit!
>
> I have a bit of a problem with the virtual router within CS. In my 
> case, it is not forwarding traffic from a guest network to public.
>
> From the VR cli, I can ping out to google (8.8.8.8) via public without 
> issue, I can ping other devices on the public net (e.g. 192.168.0.13 - 
> don't judge me) and I can ping devices in the guest network 
> (10.0.0.46/24).  You would certainly think that this would be enough.  
> It isn't.
>
> From the device in the guest network (10.0.0.46/24), I can ping the 
> VR/network gateway without issue and the VR is set as the default 
> gateway (10.0.0.1/24).  Device on guest network cannot ping out past 
> the default gateway and thus cannot reach either local infrastructure 
> like DNS (192.168.0.13/24) or internet.
>
> From the VR in the admin portal:
>
> Could I get a suggestion or two on what I might be doing wrong here?
>
> Thanks!
>
> Ron Gage
>
>