Re: security group and xenserver query

2014-11-27 Thread Tejas Sheth
Public IP > range OR a Private IP range fronted by a Router/Firewall/Load Balancer > etc > but this will be outside of CloudStack control. > > So to answer the original question it is possible to allocate a > separate > VLAN to each Guest Network and if required to front this netwo

Re: security group and xenserver query

2014-11-27 Thread Jayapal Reddy Uradi
Private Cloud. Kind Regards Geoff Higginbottom CTO / Cloud Architect D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS ___

RE: security group and xenserver query

2014-11-27 Thread Vadim Kimlaychuk
vhd-util must have execution bit set. make chmod +x for it. Vadim. -Original Message- From: Tejas Sheth [mailto:tshet...@gmail.com] Sent: Thursday, November 27, 2014 1:41 PM To: users@cloudstack.apache.org Subject: Re: security group and xenserver query Hi Jayapal, kindly find the

Re: security group and xenserver query

2014-11-27 Thread Jayapal Reddy Uradi
However you can then, as a Root Admin, create additional Guest >> Networks >>>>>> using the 'Offering for shared security group enabled networks' and >>>>>> dedicate this to a Domain or an Account. When doing so you allocate a >>>>>&g

Re: security group and xenserver query

2014-11-27 Thread Tejas Sheth
; >>>> The IP range allocated to each network can be either a true Public IP > >>>> range OR a Private IP range fronted by a Router/Firewall/Load Balancer > >> etc > >>>> but this will be outside of CloudStack control. > >>>> > >

Re: security group and xenserver query

2014-11-27 Thread Jayapal Reddy Uradi
ate IP range fronted by a Router/Firewall/Load Balancer >> etc >>>> but this will be outside of CloudStack control. >>>> >>>> So to answer the original question it is possible to allocate a separate >>>> VLAN to each Guest Network and if required to

Re: security group and xenserver query

2014-11-27 Thread Tejas Sheth
> >> Public Cloud, but could be used in a Private Cloud. > >> > >> Kind Regards > >> > >> Geoff Higginbottom > >> CTO / Cloud Architect > >> > >> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 > >> > >>

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
10:46 > >> To: users@cloudstack.apache.org > >> Subject: Re: security group and xenserver query > >> > >> No, in Advanced Zone with SG - just like in Basic zone - there is no per > >> customer VLAN; there are no firewall, load balancer or additional

Re: security group and xenserver query

2014-11-26 Thread Jayapal Reddy Uradi
ic Cloud, but could be used in a Private Cloud. >> >> Kind Regards >> >> Geoff Higginbottom >> CTO / Cloud Architect >> >> D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 >> >> geoff.higginbot...@shapeblue.com | www.shapeblue.c

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
ot...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue > > ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS > > > ____________ > From: Nux! > Sent: 26 November 2014 10:46 > To: users@cloudstack.apache.org > Subject: Re: security group and xenserver query > > No,

Re: security group and xenserver query

2014-11-26 Thread Nux!
-d7f3-4992-a1d1-a513fed003ec Thanks, Geoff. Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "Nux!" > To: users@cloudstack.apache.org > Sent: Wednesday, 26 November, 2014 20:54:16 > Subject: Re: securit

Re: security group and xenserver query

2014-11-26 Thread Nux!
! www.nux.ro - Original Message - > From: "Geoff Higginbottom" > To: users@cloudstack.apache.org > Sent: Wednesday, 26 November, 2014 20:20:59 > Subject: Re: security group and xenserver query > Sorry Nux, but YES there are Customer Specific VLANs in a Security Gr

Re: security group and xenserver query

2014-11-26 Thread Geoff Higginbottom
2014 10:46 To: users@cloudstack.apache.org Subject: Re: security group and xenserver query No, in Advanced Zone with SG - just like in Basic zone - there is no per customer VLAN; there are no firewall, load balancer or additional NICs; there is also no IPv6. A VM will just get a public IP via DHC

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
t;>> 2014-11-26 21:43:31,567 ERROR [c.c.v.VirtualMachineManagerImpl] > >>>> (secstorage-1:ctx-be9596e4) Failed to start instance > >>>> VM[SecondaryStorageVm|s-6-VM] > >>>> 2014-11-26 21:43:31,802 DEBUG [c.c.c.CapacityManagerImpl] > >>

Re: security group and xenserver query

2014-11-26 Thread Yiping Zhang
age to be expicitly installed. When >>you >> >> add host to CS it copies some files to the host itself and you don't >> need >> >> to bother about them usually. >> >> >> >> Vadim. >> >> >> >> -Original Message--

Re: security group and xenserver query

2014-11-26 Thread Jayapal Reddy Uradi
1:43:31,802 DEBUG [c.c.c.CapacityManagerImpl] >>>> (secstorage-1:ctx-be9596e4) VM state transitted from :Starting to >> Stopped >>>> with event: OperationFailedvm's original host id: null new host id: null >>>> host id before state transition: 2 >>&g

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
vm > >> com.cloud.exception.AgentUnavailableException: Resource [Host:2] is > >> unreachable: Host 2: Unable to start instance due to null > >> 2014-11-26 21:43:31,828 INFO [c.c.s.s.SecondaryStorageManagerImpl] > >> (secstorage-1:ctx-be9596e4) Unable to start secondary st

Re: security group and xenserver query

2014-11-26 Thread Jayapal Reddy Uradi
ncer or additional NICs; >>> there is also no IPv6. >>> >>> A VM will just get a public IP via DHCP and that's it, the customers are >>> isolated via "security groups" which is a fancy name for iptables rules. >>> >>> Hope this cl

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
>> isolated via "security groups" which is a fancy name for iptables rules. >> >> Hope this clears it up. >> >> -- >> Sent from the Delta quadrant using Borg technology! >> >> Nux! >> www.nux.ro >> >> - Original Mes

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
quadrant using Borg technology! > > Nux! > www.nux.ro > > - Original Message - > > From: "Tejas Sheth" > > To: users@cloudstack.apache.org > > Sent: Wednesday, 26 November, 2014 10:14:11 > > Subject: Re: security group and xenserver query &

Re: security group and xenserver query

2014-11-26 Thread Nux!
is a fancy name for iptables rules. Hope this clears it up. -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "Tejas Sheth" > To: users@cloudstack.apache.org > Sent: Wednesday, 26 November, 2014 10:14:11 > Subject: R

RE: security group and xenserver query

2014-11-26 Thread Geoff Higginbottom
- From: Tejas Sheth [mailto:tshet...@gmail.com] Sent: 26 November 2014 10:14 To: users@cloudstack.apache.org Subject: Re: security group and xenserver query Thanks for simplification, so it means that each account will have seprate VLAN with its own subnet and those VLANs will be created and

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
:53 > To: users@cloudstack.apache.org > Subject: Re: security group and xenserver query > > so NAT and loadbalancers are not possible if we use security group? > > so it meanse there will be no internal and external IPs for VMs. is it > correct? > > On Wed, Nov 26,

RE: security group and xenserver query

2014-11-26 Thread Geoff Higginbottom
: +447968161581 geoff.higginbot...@shapeblue.com -Original Message- From: Tejas Sheth [mailto:tshet...@gmail.com] Sent: 26 November 2014 09:53 To: users@cloudstack.apache.org Subject: Re: security group and xenserver query so NAT and loadbalancers are not possible if we use security group

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
;>> On Tue, Nov 25, 2014 at 8:31 PM, Vadim Kimlaychuk < > >> vadim.kimlayc...@elion.ee > >>>> wrote: > >>> > >>>> XenServer does not need any package to be expicitly installed. When > you > >>>> add host to CS it copies

Re: security group and xenserver query

2014-11-26 Thread Jayapal Reddy Uradi
be expicitly installed. When you >>>> add host to CS it copies some files to the host itself and you don't >> need >>>> to bother about them usually. >>>> >>>> Vadim. >>>> >>>> -Original Message- >>>> F

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
uadrant using Borg technology! >> >> Nux! >> www.nux.ro >> >> - Original Message - >> > From: "Tejas Sheth" >> > To: users@cloudstack.apache.org >> > Sent: Wednesday, 26 November, 2014 06:30:33 >> > Subject: Re:

Re: security group and xenserver query

2014-11-26 Thread Tejas Sheth
Delta quadrant using Borg technology! > > Nux! > www.nux.ro > > - Original Message - > > From: "Tejas Sheth" > > To: users@cloudstack.apache.org > > Sent: Wednesday, 26 November, 2014 06:30:33 > > Subject: Re: security group and xenserver query

Re: security group and xenserver query

2014-11-25 Thread Nux!
pache.org > Sent: Wednesday, 26 November, 2014 06:30:33 > Subject: Re: security group and xenserver query > Hello, > > I have made the bridge configuration, but when i am selecting advance > zone. it is not showing public network configuration. only guest and > management is availabel

Re: security group and xenserver query

2014-11-25 Thread Tejas Sheth
host to CS it copies some files to the host itself and you don't > need > >> to bother about them usually. > >> > >> Vadim. > >> > >> -Original Message- > >> From: Tejas Sheth [mailto:tshet...@gmail.com] > >> Sent: Tuesday, Novem

Re: security group and xenserver query

2014-11-25 Thread Jayapal Reddy Uradi
e host itself and you don't need >> to bother about them usually. >> >> Vadim. >> >> -Original Message- >> From: Tejas Sheth [mailto:tshet...@gmail.com] >> Sent: Tuesday, November 25, 2014 4:52 PM >> To: users@cloudstack.apache.org >> Subject: secu

Re: security group and xenserver query

2014-11-25 Thread Nux!
15:15:33 > Subject: Re: security group and xenserver query > Thanks, > > So can i take it as confirmation and proceed with only following bridge > configuration in xenserver 6.2? > > # xe-switch-network-backend bridge > > # vi /etc/sysctl.conf >net.bridge.br

Re: security group and xenserver query

2014-11-25 Thread Tejas Sheth
s some files to the host itself and you don't need > to bother about them usually. > > Vadim. > > -Original Message- > From: Tejas Sheth [mailto:tshet...@gmail.com] > Sent: Tuesday, November 25, 2014 4:52 PM > To: users@cloudstack.apache.org > Subject: securi

RE: security group and xenserver query

2014-11-25 Thread Vadim Kimlaychuk
014 4:52 PM To: users@cloudstack.apache.org Subject: security group and xenserver query Hello Jayapal, Thanks for reply, I have understood the bridge configuration part but can you clarify CSP package part. if CSP package comes with xenserver 6.2 then do we need to install it explicitly?

security group and xenserver query

2014-11-25 Thread Tejas Sheth
Hello Jayapal, Thanks for reply, I have understood the bridge configuration part but can you clarify CSP package part. if CSP package comes with xenserver 6.2 then do we need to install it explicitly? It would be really helpful if you can send link to install CSP in xenserver 6.2 because C

Re: security group and xenserver query

2014-11-25 Thread Jayapal Reddy Uradi
Hi Tejas, The network mode set to 'bridge' mode. #xe-switch-network-backend bridge I think Xenserver 6.2 comes with the CSP package, so you need to install it explicitly. Thanks, Jayapal On 25-Nov-2014, at 4:47 PM, Tejas Sheth wrote: > Hello, > > We are configuring advanced zone in cl

security group and xenserver query

2014-11-25 Thread Tejas Sheth
Hello, We are configuring advanced zone in cloudstack 4.3 in xenserver 6.2. we want to configure security group in advance zone. do we have to do any special configuration in xenserver 6.2. xenserver has default networking configuration. Thanks and regards, Tejas