Re: [Advanced Zone] Isolated Source NAT issue (NAT not working)

2013-12-20 Thread Francesco Maria Magnini
gt; On Fri, Dec 20, 2013 at 1:57 AM, Andrei Mikhailovsky <mailto:and...@arhont.com> > <mailto:and...@arhont.com>>wrote: > > > > Francesco, > > I believe you need to add a firewall rule to allow ingress ICMP traffic. > Once allowed you should be able to ping it.

Re: [Advanced Zone] Isolated Source NAT issue (NAT not working)

2013-12-20 Thread Geoff Higginbottom
Maria Magnini" mailto:fmm1...@gmail.com>mailto:fmm1...@gmail.com>>> To: users@cloudstack.apache.org<mailto:users@cloudstack.apache.org><mailto:users@cloudstack.apache.org> Sent: Thursday, 19 December, 2013 11:23:37 PM Subject: Re: [Advanced Zone] Isolated Source NAT issue (N

Re: [Advanced Zone] Isolated Source NAT issue (NAT not working)

2013-12-20 Thread Francesco Maria Magnini
inal Message - > > From: "Francesco Maria Magnini" fmm1...@gmail.com>> > To: users@cloudstack.apache.org<mailto:users@cloudstack.apache.org> > Sent: Thursday, 19 December, 2013 11:23:37 PM > Subject: Re: [Advanced Zone] Isolated Source NAT issue (NAT not wor

Re: [Advanced Zone] Isolated Source NAT issue (NAT not working)

2013-12-20 Thread Geoff Higginbottom
> Sent: Thursday, 19 December, 2013 11:23:37 PM Subject: Re: [Advanced Zone] Isolated Source NAT issue (NAT not working) Hi Geoff, I've added a "permit all" egress rule (source 0.0.0.0/0 ALL) and now guest VMs can connect to Internet. Is it normal that the Virtual Router is

Re: [Advanced Zone] Isolated Source NAT issue (NAT not working)

2013-12-20 Thread Francesco Maria Magnini
u need to add a firewall rule to allow ingress ICMP traffic. > Once allowed you should be able to ping it. > > Andrei > > - Original Message - > > From: "Francesco Maria Magnini" > To: users@cloudstack.apache.org > Sent: Thursday, 19 December, 2013 11:23:

Re: [Advanced Zone] Isolated Source NAT issue (NAT not working)

2013-12-19 Thread Andrei Mikhailovsky
M Subject: Re: [Advanced Zone] Isolated Source NAT issue (NAT not working) Hi Geoff, I've added a "permit all" egress rule (source 0.0.0.0/0 ALL) and now guest VMs can connect to Internet. Is it normal that the Virtual Router is still not reachable through the public network? I

Re: [Advanced Zone] Isolated Source NAT issue (NAT not working)

2013-12-19 Thread Francesco Maria Magnini
Hi Geoff, I've added a "permit all" egress rule (source 0.0.0.0/0 ALL) and now guest VMs can connect to Internet. Is it normal that the Virtual Router is still not reachable through the public network? I cannot ping its public IP address (other 2 public SSVM are pingables). Regards On Thu, Dec

Re: [Advanced Zone] Isolated Source NAT issue (NAT not working)

2013-12-19 Thread Geoff Higginbottom
Francesco, Have you enabled egress rules to allow outbound traffic for guest VMs If you are trying to ping the public IP of the VR it will not respond due to security settings, however the SSVM and CPVM do respond. Regards Geoff Higginbottom CTO / Cloud Architect D: +44 20 3603 0542 | S: +44

[Advanced Zone] Isolated Source NAT issue (NAT not working)

2013-12-19 Thread Francesco Maria Magnini
Hi guys, I cannot ping internet from VMs. Pinging from Virtual Router is ok. In addition, SSVM are reachable from outside (storage/proxy ssvm) through addresses configured in public network range, Virtual router is not reachable (but can ping internet). Any idea? -- “I videogiochi non influen