There is a feature which got pulled from the 4.1 release which should make it into the 4.2 release, which is 'Security Group Isolation in Advanced Zone'. This enables you to create a basic style network with security groups, but in advanced networking.
An alternative might to use advanced networking, but to create a custom network offering, which does not have any Source or Static NAT features enabled, you can then use a physical Router as the GW, but still use the VR as the DHCP Server. You can actually go the whole hog and create an offering which does not use any VR if it suits your use case. Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com -----Original Message----- From: WXR [mailto:474745...@qq.com] Sent: 26 June 2013 17:59 To: users Subject: Re: How can I allocate a specific IP when I create an instance. If I use basic zone and basic network, I can set the public ips(the ips which can be routed on internet) to the guest newwork.So a vm instance can get the public ip directly from dhcp and I can see the public ip on its nic. But the advanced network topology is not as same as basic network,the ip on the vm is a private ip and the I must add a static NAT rule to map a public ip to the vm.And I hope all vms can link to the physical switch directly,but in advanced network,a vrouter is the gateway,all vms a linked to the vrouter. I don't know if there is a guest network just as the basic network topology in advance zone.If there is,I prefer to use the advanced network. ------------------ Original ------------------ From: "Dave Dunaway"<dave.duna...@gmail.com>; Date: Thu, Jun 27, 2013 02:19 AM To: "users"<users@cloudstack.apache.org>; "jason.pavao"<jason.pa...@oracle.com>; Subject: Re: How can I allocate a specific IP when I create an instance. @Geoff: Of course we are talking advanced networking, and having consideration of what your networks are that you can use. If someone wants to put a 10.x.x.x ip on a VM that is on a 192.x.x.x network, then they can gladly shoot themselves in the foot. Ideally the person making such a change understands the 'basic's of advanced networking in CloudPlatform. Otherwise they should stick the UI.;) @Jason: Look in the cloud.nics table. The nics for VMs are defined here. Modify as needed. A restart of the VM to make sure it all works is highly recommended. In our testing environment I can move a VM from one network to another, add nics, change IP's etc quite easily. Some of the 4.1 API will add this functionality (add nics for example to an existing VM). But there's still a lot of immutable things in CloudPlatform that shouldn't be, and that maybe one day will be a feature. We just need to make the requests for those features. On Wed, Jun 26, 2013 at 1:30 PM, Jason Pavao <jason.pa...@oracle.com> wrote: > Do you by chance have a sample sql query that would perform this? > > > > On 6/26/2013 8:51 AM, Dave Dunaway wrote: > >> There should be a way to have the ability to reserve an IP and still >> have DHCP assign the IP by mac reservation. There's no technical >> reason this wouldn't work and likely a feature a lot of people would >> love to see. The only hold back is the UI not allowing you to do so. >> >> Ultimately, you can go to the DB and change the VM's IP in the nics >> table to what you want (reboot the VM and the IP change will occur). >> Which is not the preferred way to do so, but ultimately that >> functionality from the UI would be ideal. >> >> Even going as far as intergrating IPAM functionality into the product >> would be ideal. >> >> >> On Wed, Jun 26, 2013 at 11:44 AM, Geoff Higginbottom < >> geoff.higginbottom@shapeblue.**com >> <geoff.higginbot...@shapeblue.com>> >> wrote: >> >> Simple answer - you can't. >>> >>> In an advanced zone, you can specify the IP address when you create >>> a new VM using the API, however in a basic zone, because the IP will >>> depend on which POD your VM ends up in, and as a user you cannot >>> influence this, there is no way to specific the IP, even if you are a root >>> admin. >>> >>> The reason it still fails when you manually change the IP is that >>> the security groups feature is expecting the VM to have the IP >>> CloudStack allocated it via DHCP. >>> >>> Regards >>> >>> Geoff Higginbottom >>> CTO / Cloud Architect >>> >>> >>> D: +44(0)20 3603 0542<tel:+442036030542> | S: +44(0)20 3603 0540<tel: >>> +442036030540> | M: +44(0)7968161581<tel:+447968161581> >>> >>> geoff.higginbottom@shapeblue.**com >>> <geoff.higginbot...@shapeblue.com> >>> <mailto:geoff.higginbottom@**shapeblue.com<geoff.higginbottom@shapeb >>> lue.com> >>> > >>> | www.shapeblue.com >>> >>> ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS >>> >>> >>> >>> On 26 Jun 2013, at 05:02, "WXR" >>> <474745...@qq.com<http://qq.**com<http://qq.com>>> >>> wrote: >>> >>> cloudstack version: 4.1 >>> network type: basic network >>> >>> When I create a new instance,the vm will get a random IP from the >>> DHCP server on vrouter. >>> >>> If I want to: >>> 1.allocate a specific ip to the vm. >>> 2.allocate multiple ips to the vm. >>> 3.change the vm ip from one to another. >>> >>> How can I achieve it? I try to bind the ip to the vm nic manually >>> but the ip can not be accessed. >>> This email and any attachments to it may be confidential and are >>> intended solely for the use of the individual to whom it is >>> addressed. Any views or opinions expressed are solely those of the >>> author and do not necessarily represent those of Shape Blue Ltd or >>> related companies. If you are not the intended recipient of this >>> email, you must neither take any action based upon its contents, nor >>> copy or show it to anyone. Please contact the sender if you believe >>> you have received this email in error. Shape Blue Ltd is a company >>> incorporated in England & Wales. ShapeBlue Services India LLP is >>> operated under license from Shape Blue Ltd. ShapeBlue is a >>> registered trademark. >>> >>> > -- > Thanks. > -Jason > > This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.
