Hello, You can't have Security Groups in a pure advanced zone (ie without security groups). If you opt for an Advanced zone with Security Groups then you can't have more than one NIC per VM (sux, I know). So basically it can't be done.
The closest you can go for IMHO is in an Advanced Zone to add your VM to a NAT-ed 10.x network (I highly discourage you to use /8) and if you really must have public IPs, then go for a shared network - however security groups are not available, so you will need to firewall this somehow yourself. HTH Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro ----- Original Message ----- > From: "Semih Tolga DEMİR" <semihtolgade...@gmail.com> > To: users@cloudstack.apache.org > Sent: Thursday, 4 February, 2016 11:51:48 > Subject: Adding Ethernet Card > Hi; > > I need to setup/design an advanced networking with the following features > like below and i like to ask if its possbile or not. > > > > All vm's have 2 ethernet cards. > > 1) This ethernet uses real ip(public) for internet access with security > groups enabled. This ethernets, networks default gateway directly points to > the gateway at network, it will not pass thru ACS virtual router, we do not > want to make any NAT or SNAT operation over ACS virtual router. > > > > 2) This ethernet will use virtual ip like 10.0.0.0/8 for guest network and > all vm's use this ip for vm interconnect. > > > > After this setup we like to calculate bandwidth usage only for the first > ethernet card, we do not want to calculate usage for vm interconnect. > > > > Thanks
