Jayapal Reddy created CLOUDSTACK-2704:
-----------------------------------------

             Summary: [Shared Nework] Allow Egress traffic for shared network 
by default
                 Key: CLOUDSTACK-2704
                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2704
             Project: CloudStack
          Issue Type: Bug
      Security Level: Public (Anyone can view this level - this is the default.)
          Components: Network Controller, Network Devices
    Affects Versions: 4.1.0
            Reporter: Jayapal Reddy
            Assignee: Jayapal Reddy
             Fix For: 4.2.0


1. Egress rules blocks the guest traffic to public side by default.
2. Egress is not supported for shared networks so by default we should allow 
egress.
3. This issue can  be handled when CLOUDSTACK-1578 is fixed.

WorkAround:
1. In router execute the below command
iptables -A FW_OUTBOUND -j ACCEPT

2. To persist in router reboot add the below entry in iptables-router file 
after  '-I FW_OUTBOUND -m state --state RELATED,ESTABLISHED -j ACCEPT' entry

-A FW_OUTBOUND -j ACCPET


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to