Fred Here are couple of places you can try
https://cwiki.apache.org/confluence/display/CLOUDSTACK/CloudStack+Advanced+Network+Tutorial+-+Step+by+Step or http://shapeblue.com/cloudstack/understanding-cloudstacks-physical-networking-architecture/ As for public IP range, it's part of setup of your zone. Pay close attention to your management, internal and external interfaces on your hypervisor. As for firewall, you can use your SRX as a firewall in a network offering. The CS will deal with opening holes in your firewall. Go to service offerings and try to create a new network offering. Click on firewall and you'll see what your options are. Good luck Amin ________________________________ From: Fred Newtz <fbne...@gmail.com> To: users@cloudstack.apache.org Sent: Thursday, April 3, 2014 2:59 PM Subject: Public IP Addressing in a Advanced Zone behind a Firewall Public IP addresses confuse me the most in a Cloudstack install. I have a Firewall that is hosting all of my public IP addresses now. The management server is supposed to sit behind a NAT device to protect it from attack. How am I supposed to assign public IP addresses to virtual machines (virtual routers) inside of the NAT device? I have not seen any clear documentation on how this is supposed to be configured to make everything work correctly. Where do I assign my IP addresses and how do I get them through the firewall correctly? I just purchased a Juniper SRX100 device (will be a small deployment). Will installing this help manage the Public IP situation easier (and even automatic)? If anyone has any suggestions on what I should search for to solve this issue that would be great. Explaining would be even better. Thanks, Fred
