Hi Dag, Thank you for guiding me, i know it's a weird use case and probably would never be required in a production environment. I will definitely try to make a dummy interface and give it to the guest network target bridge. I know it would be out of the scope of this email trail for you to explain me tagged and untagged networking in L2 and L3 networks, but I would search around the internet and ping this thread if I'm again stuck at some specific issue after I reach my university's lab. Appreciate your help.
Thanks, Parth Patel On Fri, 6 Apr 2018 at 17:06 Dag Sonstebo <dag.sonst...@shapeblue.com> wrote: > Hi Parth, > > Take a look through the full email trail – I think we discussed this > earlier on. In short the answer is no – by definition you can not run > completely untagged isolated networks in an advanced zone – but “tagged” > means different things for L2 and L3 isolation. The real answer - “it > depends” – an advanced zone always relies on some sort of guest network > isolation, which in it’s simplest form equates to L2 VLANs. If you were to > invest time, effort and money into an SDN solution like Nuage or Nicira/NSX > you could potentially get around it – but complexity and cost goes up. You > could have a play with something like GRE tunnelling (L3) – but in my > experience this doesn’t scale well, eats a ton of CPU cycles and may not be > fit for purpose. Again you are looking at a more complex solution. > > Regarding the dummy network interface it looks to me like a simple module > install and configuration – see e.g. > https://www.question-defense.com/2012/11/26/linux-create-fake-ethernet-interface > . Not my post and I can’t vouch for it’s validity – but the process seems > straight forward: > > [root@kvm1 hooks]# lsmod | grep dummy > [root@kvm1 hooks]# modprobe dummy > [root@kvm1 hooks]# lsmod | grep dummy > dummy 2714 0 > [root@kvm1 hooks]# ip link set name eth99 dev dummy0 > [root@kvm1 hooks]# ifconfig eth99 > eth99 Link encap:Ethernet HWaddr 92:BF:A6:30:20:3E > BROADCAST NOARP MTU:1500 Metric:1 > RX packets:0 errors:0 dropped:0 overruns:0 frame:0 > TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:0 > RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) > > > Dag Sonstebo > Cloud Architect > ShapeBlue > > > dag.sonst...@shapeblue.com > www.shapeblue.com > 53 Chandos Place, Covent Garden, London WC2N 4HSUK > @shapeblue > > > > On 06/04/2018, 11:45, "Parth Patel" <parthpatel2...@gmail.com> wrote: > > Hi Dag, > > Thanks for the response. I am currently looking into VLANs and network > configuration for my case. But I want to know one thing: are "untagged" > VLAN networks sufficient for an advanced zone to function with two > networks? I did not state I do not want to use VLANs for networking > but I > wanted to know if ACS advanced zone would function if VLANs are > untagged? > (The network router/switch did not support them). According to my > knowledge > I would have to dig much deeper into kernel files to provide a dummy > interface as systemctl restart network would not function properly, > still > appreciate the advice. I will look into this more and see what I can do > with it. > > Thanks, > Parth Patel > > On Fri, 6 Apr 2018 at 13:59 Dag Sonstebo <dag.sonst...@shapeblue.com> > wrote: > > > Hi Parth, > > > > Keep in mind you are in unchartered waters – so there may be some > > stumbling blocks before you get this to work. > > > > I suspect what you have to do is change cloudbr1 such that it is > backed by > > a fake or dummy ethernet interface. What seems to happen is the agent > > script looks for the network device backing the bridge rather than > the > > bridge itself. > > This would mean your setup is like this: > > > > Physical eth0 -> cloudbr0 > handles management and public > > Dummy eth1 -> cloudbr1 > handles isolated guest traffic and allows > for > > isolated VLANs internally on the host > > > > Keep in mind the context here – you have stated you don’t want VLANs > > traversing your physical network, hence we are trying to get this > working > > on a single host only. How you configure your IP ranges for > management and > > public is something you need to experiment with and see what works > for you. > > > > Regards, > > Dag Sonstebo > > Cloud Architect > > ShapeBlue > > > > From: Parth Patel <parthpatel2...@gmail.com> > > Reply-To: "users@cloudstack.apache.org" <users@cloudstack.apache.org > > > > Date: Friday, 6 April 2018 at 07:30 > > To: "users@cloudstack.apache.org" <users@cloudstack.apache.org> > > Subject: Re: Untagged Networking for Advanced Zone possible? > > > > Hi Dag, > > > > When I tried your method and created a NIC-less bridge, following > are the > > contents of my ifcfg-* network files: > > > > ifcfg-cloudbr0: > > TYPE=Bridge > > PROXY_METHOD=none > > BROWSER_ONLY=no > > BOOTPROTO=none > > DEFROUTE=yes > > IPV4_FAILURE_FATAL=no > > NAME=cloudbr0 > > UUID=25aabe73-8e11-408f-a4ec-c03b26d3aa6e > > DEVICE=cloudbr0 > > ONBOOT=yes > > IPADDR=172.16.20.13 > > PREFIX=16 > > GATEWAY=172.16.0.1 > > DNS1=8.8.8.8 > > DNS2=172.16.0.1 > > NM_CONTROLLED=no > > > > ifcfg-cloudbr1: > > TYPE=Bridge > > IPV4_FAILURE_FATAL=no > > NAME=cloudbr1 > > UUID=25aabe73-8e11-408f-a4ec-c03b26d3aa6e > > DEVICE=cloudbr1 > > ONBOOT=yes > > NM_CONTROLLED=no > > > > ifcfg-eno1: > > TYPE=Ethernet > > PROXY_METHOD=none > > BROWSER_ONLY=no > > BOOTPROTO=none > > DEFROUTE=yes > > IPV4_FAILURE_FATAL=no > > NAME=eno1 > > UUID=25aabe73-8e11-408f-a4ec-c03b26d3aa6e > > DEVICE=eno1 > > ONBOOT=yes > > IPADDR=172.16.20.13 > > PREFIX=16 > > GATEWAY=172.16.0.1 > > DNS1=8.8.8.8 > > DNS2=172.16.0.1 > > NM_CONTROLLED=no > > BRIDGE=cloudbr0 > > > > brctl show output: > > [root@srvr3 ~]# brctl show > > bridge name bridge id STP enabled interfaces > > cloud0 8000.000000000000 no > > cloudbr0 8000.3464a92a09f3 no eno1 > > cloudbr1 8000.000000000000 no > > virbr0 8000.5254002dabdb yes virbr0-nic > > > > > > > > when adding a host in advanced zone it shows the following error: > Could > > not find network 'cloudbr1' > > > > 2018-04-04 02:03:11,887 DEBUG [c.c.u.s.SSHCmdHelper] > > (qtp510113906-14:ctx-707b53e5 ctx-8d49ccb3) (logid:dff92f23) > Executing cmd: > > /usr/share/cloudstack-common/scripts/util/keystore-cert-import > > /etc/cloudstack/agent/agent.properties /etc/cloudstack/agent/ > > 2018-04-04 02:03:15,686 DEBUG [c.c.h.k.d.LibvirtServerDiscoverer] > > (qtp510113906-14:ctx-707b53e5 ctx-8d49ccb3) (logid:dff92f23) > Succeeded to > > import certificate in the keystore for agent on the KVM host: > 172.16.20.13. > > Agent secured and trusted. > > 2018-04-04 02:03:15,688 DEBUG [c.c.u.s.SSHCmdHelper] > > (qtp510113906-14:ctx-707b53e5 ctx-8d49ccb3) (logid:dff92f23) > Executing cmd: > > cloudstack-setup-agent -m 172.16.20.13 -z 1 -p 1 -c 1 -g > > 1fd67886-c5d9-3464-ac73-46689258b34e -a --pubNic=cloudbr0 > --prvNic=cloudbr0 > > --guestNic=cloudbr1 --hypervisor=kvm > > 2018-04-04 02:03:19,674 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-af4b26a6) (logid:4c5c40d4) Begin cleanup > > expired async-jobs > > 2018-04-04 02:03:19,683 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-af4b26a6) (logid:4c5c40d4) End cleanup > expired > > async-jobs > > 2018-04-04 02:03:20,022 DEBUG > [c.c.n.r.VirtualNetworkApplianceManagerImpl] > > (RouterStatusMonitor-1:ctx-f1d46df0) (logid:a021b44c) Found 0 > routers to > > update status. > > 2018-04-04 02:03:20,025 DEBUG > [c.c.n.r.VirtualNetworkApplianceManagerImpl] > > (RouterStatusMonitor-1:ctx-f1d46df0) (logid:a021b44c) Found 0 VPC > networks > > to update Redundant State. > > 2018-04-04 02:03:20,029 DEBUG > [c.c.n.r.VirtualNetworkApplianceManagerImpl] > > (RouterStatusMonitor-1:ctx-f1d46df0) (logid:a021b44c) Found 0 > networks to > > update RvR status. > > 2018-04-04 02:03:22,518 DEBUG [c.c.c.ConsoleProxyManagerImpl] > > (consoleproxy-1:ctx-9d047585) (logid:3b4da034) Skip capacity scan as > there > > is no Primary Storage in 'Up' state > > 2018-04-04 02:03:29,677 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-4378508d) (logid:9de3110e) Begin cleanup > > expired async-jobs > > 2018-04-04 02:03:29,695 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-4378508d) (logid:9de3110e) End cleanup > expired > > async-jobs > > 2018-04-04 02:03:35,796 DEBUG [c.c.s.StatsCollector] > > (StatsCollector-2:ctx-a6998a7a) (logid:174df0f0) AutoScaling Monitor > is > > running... > > 2018-04-04 02:03:35,812 DEBUG [c.c.s.StatsCollector] > > (StatsCollector-1:ctx-51d8b17f) (logid:8d7cca2e) HostStatsCollector > is > > running... > > 2018-04-04 02:03:35,812 DEBUG [c.c.s.StatsCollector] > > (StatsCollector-3:ctx-db3df7da) (logid:c38b9f19) StorageCollector is > > running... > > 2018-04-04 02:03:39,675 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-26aea785) (logid:48c9a5ba) Begin cleanup > > expired async-jobs > > 2018-04-04 02:03:39,686 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-26aea785) (logid:48c9a5ba) End cleanup > expired > > async-jobs > > 2018-04-04 02:03:49,677 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-ec993f07) (logid:98d10d6c) Begin cleanup > > expired async-jobs > > 2018-04-04 02:03:49,692 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-ec993f07) (logid:98d10d6c) End cleanup > expired > > async-jobs > > 2018-04-04 02:03:50,021 DEBUG > [c.c.n.r.VirtualNetworkApplianceManagerImpl] > > (RouterStatusMonitor-1:ctx-592f1702) (logid:39d0b341) Found 0 > routers to > > update status. > > 2018-04-04 02:03:50,024 DEBUG > [c.c.n.r.VirtualNetworkApplianceManagerImpl] > > (RouterStatusMonitor-1:ctx-592f1702) (logid:39d0b341) Found 0 VPC > networks > > to update Redundant State. > > 2018-04-04 02:03:50,027 DEBUG > [c.c.n.r.VirtualNetworkApplianceManagerImpl] > > (RouterStatusMonitor-1:ctx-592f1702) (logid:39d0b341) Found 0 > networks to > > update RvR status. > > 2018-04-04 02:03:52,519 DEBUG [c.c.c.ConsoleProxyManagerImpl] > > (consoleproxy-1:ctx-099c555a) (logid:1e1eb23a) Skip capacity scan as > there > > is no Primary Storage in 'Up' state > > 2018-04-04 02:03:59,674 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-33034d0a) (logid:1c504485) Begin cleanup > > expired async-jobs > > 2018-04-04 02:03:59,684 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-33034d0a) (logid:1c504485) End cleanup > expired > > async-jobs > > 2018-04-04 02:04:09,675 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-c5079da9) (logid:8b320bb8) Begin cleanup > > expired async-jobs > > 2018-04-04 02:04:09,689 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-c5079da9) (logid:8b320bb8) End cleanup > expired > > async-jobs > > 2018-04-04 02:04:19,505 DEBUG [c.c.u.s.SSHCmdHelper] > > (qtp510113906-14:ctx-707b53e5 ctx-8d49ccb3) (logid:dff92f23) SSH > command: > > cloudstack-setup-agent -m 172.16.20.13 -z 1 -p 1 -c 1 -g > > 1fd67886-c5d9-3464-ac73-46689258b34e -a --pubNic=cloudbr0 > --prvNic=cloudbr0 > > --guestNic=cloudbr1 --hypervisor=kvm > > SSH command output:Starting to configure your system: > > Configure SElinux ... [OK] > > Configure Network ... [OK] > > Configure Libvirt ... [OK] > > Configure Firewall ... [OK] > > Configure Nfs ... [OK] > > Configure cloudAgent ... [OK] > > CloudStack Agent setup is done! > > > > > > 2018-04-04 02:04:19,670 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-3953edaa) (logid:223c6612) Begin cleanup > > expired async-jobs > > 2018-04-04 02:04:19,678 INFO [o.a.c.f.j.i.AsyncJobManagerImpl] > > (AsyncJobMgr-Heartbeat-1:ctx-3953edaa) (logid:223c6612) End cleanup > expired > > async-jobs > > 2018-04-04 02:04:20,020 DEBUG > [c.c.n.r.VirtualNetworkApplianceManagerImpl] > > (RouterStatusMonitor-1:ctx-d51c2a8c) (logid:31404001) Found 0 > routers to > > update status. > > 2018-04-04 02:04:20,022 DEBUG > [c.c.n.r.VirtualNetworkApplianceManagerImpl] > > (RouterStatusMonitor-1:ctx-d51c2a8c) (logid:31404001) Found 0 VPC > networks > > to update Redundant State. > > 2018-04-04 02:04:20,023 DEBUG > [c.c.n.r.VirtualNetworkApplianceManagerImpl] > > (RouterStatusMonitor-1:ctx-d51c2a8c) (logid:31404001) Found 0 > networks to > > update RvR status. > > 2018-04-04 02:04:22,514 DEBUG [c.c.c.ConsoleProxyManagerImpl] > > (consoleproxy-1:ctx-03cb5ba3) (logid:b63f8dea) Skip capacity scan as > there > > is no Primary Storage in 'Up' state > > 2018-04-04 02:04:22,597 DEBUG [o.a.c.c.p.RootCACustomTrustManager] > > (pool-7-thread-1:null) (logid:) A client/agent attempting connection > from > > address=172.16.20.13 has presented these certificate(s): > > Certificate [1] : > > Serial: da4b61927e0b90f4 > > Not Before:Tue Apr 03 14:03:11 IST 2018 > > Not After:Thu Apr 04 02:03:11 IST 2019 > > Signature Algorithm:SHA256withRSA > > Version:3 > > Subject DN:C=cloudstack, O=cloudstack, OU=cloudstack, > CN=srvr3.cloud.priv > > Issuer DN:CN=ca.cloudstack.apache.org< > http://ca.cloudstack.apache.org> > > Alternative Names:[[7, 172.16.20.13], [2, 172.16.20.13]] > > Certificate [2] : > > Serial: ca8575145c21dcc5 > > Not Before:Tue Apr 03 13:55:06 IST 2018 > > Not After:Fri Mar 27 01:55:06 IST 2048 > > Signature Algorithm:SHA256withRSA > > Version:3 > > Subject DN:CN=ca.cloudstack.apache.org< > http://ca.cloudstack.apache.org> > > Issuer DN:CN=ca.cloudstack.apache.org< > http://ca.cloudstack.apache.org> > > Alternative Names:null > > 2018-04-04 02:04:22,600 DEBUG [o.a.c.c.p.RootCACustomTrustManager] > > (pool-7-thread-1:null) (logid:) Client/agent connection from > > ip=172.16.20.13 has been validated and trusted. > > 2018-04-04 02:04:23,304 DEBUG [c.c.a.t.Request] > > (AgentManager-Handler-2:null) (logid:) Seq 5-0: Scheduling the first > > command { Cmd , MgmtId: -1, via: 5, Ver: v1, Flags: 1, > > > [{"com.cloud.agent.api.StartupRoutingCommand":{"cpuSockets":1,"cpus":4,"speed":2000,"memory":11202912256,"dom0MinMemory":1073741824,"poolSync":false,"supportsClonedVolumes":false,"caps":"hvm,snapshot","pool":"/root","hypervisorType":"KVM","hostDetails":{"Host.OS.Kernel.Version":"3.10.0-693.el7.x86_64","com.cloud.network.Networks.RouterPrivateIpStrategy":"HostLocal","Host.OS.Version":"7.4.1708","Host.OS":"CentOS"},"hostTags":[],"groupDetails":{},"type":"Routing","dataCenter":"1","pod":"1","cluster":"1","guid":"1fd67886-c5d9-3464-ac73-46689258b34e-LibvirtComputingResource","name":"srvr3.cloud.priv","id":5,"version":"4.11.0.0","iqn":"iqn.1994-05.com.redhat:895c24ab79d","publicIpAddress":"172.16.20.13","publicNetmask":"255.255.0.0","publicMacAddress":"34:64:a9:2a:09:f3","privateIpAddress":"172.16.20.13","privateMacAddress":"34:64:a9:2a:09:f3","privateNetmask":"255.255.0.0","storageIpAddress":"172.16.20.13","storageNetmask":"255.255.0.0","storageMacAddress":"34:64:a9:2a:09:f3","resourceName":"LibvirtComputingResource","gatewayIpAddress":"172.16.0.1","wait":0}},{"com.cloud.agent.api.StartupStorageCommand":{"totalSize":0,"poolInfo":{"uuid":"b0c95dc8-bd46-4d3d-a4ee-90cb869d035e","host":"172.16.20.13","localPath":"/var/lib/libvirt/images","hostPath":"/var/lib/libvirt/images","poolType":"Filesystem","capacityBytes":486035005440,"availableBytes":478874988544},"resourceType":"STORAGE_POOL","hostDetails":{},"type":"Storage","dataCenter":"1","pod":"1","guid":"1fd67886-c5d9-3464-ac73-46689258b34e-LibvirtComputingResource","name":"srvr3.cloud.priv","id":5,"version":"4.11.0.0","resourceName":"LibvirtComputingResource","wait":0}}] > > } > > 2018-04-04 02:04:23,315 DEBUG [c.c.a.t.Request] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Seq 5-0: > Processing > > the first command { Cmd , MgmtId: -1, via: 5, Ver: v1, Flags: 1, > > > [{"com.cloud.agent.api.StartupRoutingCommand":{"cpuSockets":1,"cpus":4,"speed":2000,"memory":11202912256,"dom0MinMemory":1073741824,"poolSync":false,"supportsClonedVolumes":false,"caps":"hvm,snapshot","pool":"/root","hypervisorType":"KVM","hostDetails":{"Host.OS.Kernel.Version":"3.10.0-693.el7.x86_64","com.cloud.network.Networks.RouterPrivateIpStrategy":"HostLocal","Host.OS.Version":"7.4.1708","Host.OS":"CentOS"},"hostTags":[],"groupDetails":{},"type":"Routing","dataCenter":"1","pod":"1","cluster":"1","guid":"1fd67886-c5d9-3464-ac73-46689258b34e-LibvirtComputingResource","name":"srvr3.cloud.priv","id":5,"version":"4.11.0.0","iqn":"iqn.1994-05.com.redhat:895c24ab79d","publicIpAddress":"172.16.20.13","publicNetmask":"255.255.0.0","publicMacAddress":"34:64:a9:2a:09:f3","privateIpAddress":"172.16.20.13","privateMacAddress":"34:64:a9:2a:09:f3","privateNetmask":"255.255.0.0","storageIpAddress":"172.16.20.13","storageNetmask":"255.255.0.0","storageMacAddress":"34:64:a9:2a:09:f3","resourceName":"LibvirtComputingResource","gatewayIpAddress":"172.16.0.1","wait":0}},{"com.cloud.agent.api.StartupStorageCommand":{"totalSize":0,"poolInfo":{"uuid":"b0c95dc8-bd46-4d3d-a4ee-90cb869d035e","host":"172.16.20.13","localPath":"/var/lib/libvirt/images","hostPath":"/var/lib/libvirt/images","poolType":"Filesystem","capacityBytes":486035005440,"availableBytes":478874988544},"resourceType":"STORAGE_POOL","hostDetails":{},"type":"Storage","dataCenter":"1","pod":"1","guid":"1fd67886-c5d9-3464-ac73-46689258b34e-LibvirtComputingResource","name":"srvr3.cloud.priv","id":5,"version":"4.11.0.0","resourceName":"LibvirtComputingResource","wait":0}}] > > } > > 2018-04-04 02:04:23,325 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to BareMetalDiscoverer > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to NetscalerElement > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to HypervServerDiscoverer > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to BaremetalPxeManagerImpl > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to XcpServerDiscoverer > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to NiciraNvp > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to BrocadeVcsElement > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to Ovm3Discoverer > > 2018-04-04 02:04:23,326 DEBUG [c.c.h.o.r.Ovm3Discoverer] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) > > createHostVOForConnectedAgent: Host[-0-null] > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to LxcServerDiscoverer > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to NetworkUsageManagerImpl > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to > > PremiumSecondaryStorageManagerImpl > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to Ovs > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to ConsoleProxyManagerImpl > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to OvmDiscoverer > > 2018-04-04 02:04:23,326 DEBUG [c.c.r.ResourceManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Dispatching > resource > > state event CREATE_HOST_VO_FOR_CONNECTED to KvmServerDiscoverer > > 2018-04-04 02:04:23,486 DEBUG [c.c.r.ResourceState] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Resource state > > update: [id = 1; name = srvr3.cloud.priv; old state = Creating; > event = > > InternalCreated; new state = Enabled] > > 2018-04-04 02:04:23,487 DEBUG [c.c.h.Status] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) > Transition:[Resource > > state = Enabled, Agent event = AgentConnected, Host id = 1, name = > > srvr3.cloud.priv] > > 2018-04-04 02:04:23,512 DEBUG [c.c.a.m.ClusteredAgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) create > > ClusteredAgentAttache for 1 > > 2018-04-04 02:04:23,516 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Connect to > > listener: XcpServerDiscoverer > > 2018-04-04 02:04:23,517 DEBUG [c.c.h.x.d.XcpServerDiscoverer] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Not XenServer > so > > moving on. > > 2018-04-04 02:04:23,517 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Connect to > > listener: HypervServerDiscoverer > > 2018-04-04 02:04:23,517 DEBUG [c.c.h.h.d.HypervServerDiscoverer] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Not Hyper-V > > hypervisor, so moving on. > > 2018-04-04 02:04:23,517 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Connect to > > listener: ClusteredVirtualMachineManagerImpl > > 2018-04-04 02:04:23,517 DEBUG [c.c.v.VirtualMachineManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Received > startup > > command from hypervisor host. host id: 1 > > 2018-04-04 02:04:23,517 INFO > [c.c.v.VirtualMachinePowerStateSyncImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Reset VM > power state > > sync for host: 1 > > 2018-04-04 02:04:23,547 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Connect to > > listener: SecurityGroupListener > > 2018-04-04 02:04:23,547 INFO [c.c.n.s.SecurityGroupListener] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Received a > host > > startup notification > > 2018-04-04 02:04:23,552 DEBUG [c.c.a.t.Request] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Seq > > 1-1865897620614938625: Sending { Cmd , MgmtId: 55884536686396, via: > > 1(srvr3.cloud.priv), Ver: v1, Flags: 100011, > > > [{"com.cloud.agent.api.CleanupNetworkRulesCmd":{"interval":1951,"wait":0}}] > > } > > 2018-04-04 02:04:23,555 INFO [c.c.n.s.SecurityGroupListener] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Scheduled > network > > rules cleanup, interval=1951 > > 2018-04-04 02:04:23,556 INFO [c.c.n.s.SecurityGroupListener] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Received a > host > > startup notification > > 2018-04-04 02:04:23,556 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Connect to > > listener: NetworkOrchestrator > > 2018-04-04 02:04:23,563 DEBUG [o.a.c.e.o.NetworkOrchestrator] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Host's > > hypervisorType is: KVM > > 2018-04-04 02:04:23,580 DEBUG [o.a.c.e.o.NetworkOrchestrator] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > > CheckNetworkCommand to check the Network is setup correctly on Agent > > 2018-04-04 02:04:23,600 DEBUG [c.c.a.t.Request] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Seq > > 1-1865897620614938626: Sending { Cmd , MgmtId: 55884536686396, via: > > 1(srvr3.cloud.priv), Ver: v1, Flags: 100111, > > > [{"com.cloud.agent.api.CheckNetworkCommand":{"networkInfoList":[{"physicalNetworkId":200,"privateNetworkName":"cloudbr0","publicNetworkName":"cloudbr0","guestNetworkName":"cloudbr1"}],"wait":0}}] > > } > > 2018-04-04 02:04:23,607 DEBUG [c.c.a.t.Request] > > (AgentManager-Handler-3:null) (logid:) Seq 1-1865897620614938625: > > Processing: { Ans: , MgmtId: 55884536686396, via: 1, Ver: v1, > Flags: 10, > > [{"com.cloud.agent.api.Answer":{"result":true,"wait":0}}] } > > 2018-04-04 02:04:23,730 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentManager-Handler-4:null) (logid:) Ping from 1(srvr3.cloud.priv) > > 2018-04-04 02:04:23,731 DEBUG > [c.c.v.VirtualMachinePowerStateSyncImpl] > > (AgentManager-Handler-4:null) (logid:) Process host VM state report > from > > ping process. host: 1 > > 2018-04-04 02:04:23,731 DEBUG > [c.c.v.VirtualMachinePowerStateSyncImpl] > > (AgentManager-Handler-4:null) (logid:) Process VM state report. > host: 1, > > number of records in report: 0 > > 2018-04-04 02:04:23,734 DEBUG > [c.c.v.VirtualMachinePowerStateSyncImpl] > > (AgentManager-Handler-4:null) (logid:) Done with process of VM state > > report. host: 1 > > 2018-04-04 02:04:23,741 INFO [c.c.a.m.AgentManagerImpl] > > (AgentManager-Handler-4:null) (logid:) PingMap for agent: 1 will not > be > > updated because agent is no longer in the PingMap > > 2018-04-04 02:04:23,745 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentManager-Handler-4:null) (logid:) Not processing > PingRoutingCommand > > for agent id=0; can't find the host in the DB > > 2018-04-04 02:04:23,953 DEBUG [c.c.a.t.Request] > > (AgentManager-Handler-5:null) (logid:) Seq 1-1865897620614938626: > > Processing: { Ans: , MgmtId: 55884536686396, via: 1, Ver: v1, > Flags: 110, > > > [{"com.cloud.agent.api.CheckNetworkAnswer":{"_reconnect":false,"result":false,"details":"Can > > not find network: cloudbr1","wait":0}}] } > > 2018-04-04 02:04:23,953 DEBUG [c.c.a.t.Request] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Seq > > 1-1865897620614938626: Received: { Ans: , MgmtId: 55884536686396, > via: > > 1(srvr3.cloud.priv), Ver: v1, Flags: 110, { CheckNetworkAnswer } } > > 2018-04-04 02:04:23,953 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Details from > > executing class com.cloud.agent.api.CheckNetworkCommand: Can not find > > network: cloudbr1 > > 2018-04-04 02:04:23,954 WARN [o.a.c.e.o.NetworkOrchestrator] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Unable to > setup > > agent 1 due to Can not find network: cloudbr1 > > 2018-04-04 02:04:23,956 DEBUG [c.c.a.m.AgentAttache] > > (AgentManager-Handler-5:null) (logid:) Seq 1-1865897620614938626: No > more > > commands found > > 2018-04-04 02:04:23,957 WARN [o.a.c.alerts] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) AlertType:: 7 > | > > dataCenterId:: 1 | podId:: 1 | clusterId:: null | message:: Incorrect > > Network setup on agent, Reinitialize agent after network names are > setup, > > details : Can not find network: cloudbr1 > > 2018-04-04 02:04:23,997 INFO [c.c.u.e.CSExceptionErrorCode] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Could not find > > exception: com.cloud.exception.ConnectionException in error code > list for > > exceptions > > 2018-04-04 02:04:23,998 WARN [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Monitor > > NetworkOrchestrator says there is an error in the connect process > for 1 due > > to Incorrect Network setup on agent, Reinitialize agent after > network names > > are setup, details : Can not find network: cloudbr1 > > 2018-04-04 02:04:23,998 INFO [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Host 1 is > > disconnecting with event AgentDisconnected > > 2018-04-04 02:04:24,000 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) The next > status of > > agent 1is Alert, current status is Connecting > > 2018-04-04 02:04:24,001 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Deregistering > link > > for 1 with state Alert > > 2018-04-04 02:04:24,001 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Remove Agent > : 1 > > 2018-04-04 02:04:24,001 DEBUG [c.c.a.m.ConnectedAgentAttache] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Processing > > Disconnect. > > 2018-04-04 02:04:24,001 DEBUG [c.c.a.m.AgentAttache] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Seq > > 1-1865897620614938625: Sending disconnect to class > > com.cloud.network.security.SecurityGroupListener > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: > com.cloud.hypervisor.xenserver.discoverer.XcpServerDiscoverer > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: > com.cloud.hypervisor.hyperv.discoverer.HypervServerDiscoverer > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.vm.ClusteredVirtualMachineManagerImpl > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.network.security.SecurityGroupListener > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: > org.apache.cloudstack.engine.orchestration.NetworkOrchestrator > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.storage.secondary.SecondaryStorageListener > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.storage.listener.StoragePoolMonitor > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.deploy.DeploymentPlanningManagerImpl > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.storage.LocalStoragePoolListener > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.network.SshKeysDistriMonitor > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: > com.cloud.network.router.VpcVirtualNetworkApplianceManagerImpl > > 2018-04-04 02:04:24,002 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.consoleproxy.ConsoleProxyListener > > 2018-04-04 02:04:24,005 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.network.SshKeysDistriMonitor > > 2018-04-04 02:04:24,005 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: > com.cloud.network.router.VirtualNetworkApplianceManagerImpl > > 2018-04-04 02:04:24,005 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: > > com.cloud.network.NetworkUsageManagerImpl$DirectNetworkStatsListener > > 2018-04-04 02:04:24,005 DEBUG [c.c.n.NetworkUsageManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Disconnected > called > > on 1 with status Alert > > 2018-04-04 02:04:24,006 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.storage.download.DownloadListener > > 2018-04-04 02:04:24,006 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.capacity.StorageCapacityListener > > 2018-04-04 02:04:24,006 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.capacity.ComputeCapacityListener > > 2018-04-04 02:04:24,006 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: > com.cloud.agent.manager.AgentManagerImpl$BehindOnPingListener > > 2018-04-04 02:04:24,006 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: > com.cloud.agent.manager.AgentManagerImpl$SetHostParamsListener > > 2018-04-04 02:04:24,006 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Sending > Disconnect > > to listener: com.cloud.storage.upload.UploadListener > > 2018-04-04 02:04:24,007 DEBUG [c.c.h.Status] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) > Transition:[Resource > > state = Enabled, Agent event = AgentDisconnected, Host id = 1, name = > > srvr3.cloud.priv] > > 2018-04-04 02:04:24,028 DEBUG [c.c.a.m.ClusteredAgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Notifying > other > > nodes of to disconnect > > 2018-04-04 02:04:24,034 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Failed to > handle > > host connection: com.cloud.exception.ConnectionException: Incorrect > Network > > setup on agent, Reinitialize agent after network names are setup, > details : > > Can not find network: cloudbr1 > > 2018-04-04 02:04:24,046 DEBUG [c.c.a.m.AgentManagerImpl] > > (AgentConnectTaskPool-1:ctx-0bf7b058) (logid:f7a4d646) Can not send > command > > com.cloud.agent.api.ReadyCommand due to Host 1 is not up > > 2018-04-04 02:04:25,767 DEBUG [c.c.h.d.HostDaoImpl] > (ClusteredAgentManager > > Timer:ctx-f7869282) (logid:9ff5ad9c) Resetting hosts suitable for > reconnect > > 2018-04-04 02:04:25,770 DEBUG [c.c.h.d.HostDaoImpl] > (ClusteredAgentManager > > Timer:ctx-f7869282) (logid:9ff5ad9c) Completed resetting hosts > suitable for > > reconnect > > 2018-04-04 02:04:25,770 DEBUG [c.c.h.d.HostDaoImpl] > (ClusteredAgentManager > > Timer:ctx-f7869282) (logid:9ff5ad9c) Acquiring hosts for clusters > already > > owned by this management server > > 2018-04-04 02:04:25,771 DEBUG [c.c.h.d.HostDaoImpl] > (ClusteredAgentManager > > Timer:ctx-f7869282) (logid:9ff5ad9c) Completed acquiring hosts for > clusters > > already owned by this management server > > 2018-04-04 02:04:25,772 DEBUG [c.c.h.d.HostDaoImpl] > (ClusteredAgentManager > > Timer:ctx-f7869282) (logid:9ff5ad9c) Acquiring hosts for clusters > not owned > > by any management server > > 2018-04-04 02:04:25,773 DEBUG [c.c.h.d.HostDaoImpl] > (ClusteredAgentManager > > Timer:ctx-f7869282) (logid:9ff5ad9c) Completed acquiring hosts for > clusters > > not owned by any management server > > 2018-04-04 02:04:29,219 DEBUG [o.a.c.c.p.RootCACustomTrustManager] > > (pool-8-thread-1:null) (logid:) A client/agent attempting connection > from > > address=172.16.20.13 has presented these certificate(s): > > Certificate [1] : > > > > > > Please help me understand what am I doing wrong here. I have tried > several > > approaches but none seem to work (like creating the bridge through > > virt-manager GUI or typing the IP configuration of targeted guest > network > > in the cloudbr1 file). > > > > Also, the method you suggested here where L2 network does not leave > the > > host, that would basically mean we do not need to have a physical > network > > in our LAN? like I currently have 192.168.20.0/24< > http://192.168.20.0/24> > > and 172.16.20.0/16<http://172.16.20.0/16> in my physical network, > but I > > could possibly create a isolated guest network of 10.0.2.0/24< > > http://10.0.2.0/24> ? > > > > I am also attaching the management-server logs if it would not be > stripped > > by mailing system. The logs of agent had nothing interesting or > related to > > network configuration errors, so not attaching them here. > > > > Thanks, > > Parth Patel > > > > > > dag.sonst...@shapeblue.com > > www.shapeblue.com > > 53 Chandos Place, Covent Garden, London WC2N 4HSUK > > @shapeblue > > > > > > > > On Thu, 29 Mar 2018 at 16:18 Parth Patel <parthpatel2...@gmail.com > <mailto: > > parthpatel2...@gmail.com>> wrote: > > Thanks Dag. Appreciate it. Will try this out. > > > > On Thu, 29 Mar 2018 at 16:02 Dag Sonstebo > <https://maps.google.com/?q=Mar+2018+at+16:02+Dag+Sonstebo+&entry=gmail&source=g> > <dag.sonst...@shapeblue.com > > <mailto:dag.sonst...@shapeblue.com>> wrote: > > Hi Parth, > > > > If you want a KVM networking introduction take a look at my blog > post from > > a couple of years back – this is still valid: > > http://www.shapeblue.com/networking-kvm-for-cloudstack/ > > > > In short – you don’t set up VLAN tagging for isolated networks on > the KVM > > host – you set up the bridge and then specify your VLAN range when > you set > > up your zone in CloudStack. CloudStack then takes care of creating > the > > isolated VLAN isolated networks on the host. So in short – you > create your > > bridges, then use the bridge names in the advanced zone setup. > > > > Virtual bridge – yes this is similar to the cloud0 bridge, and yes > you > > create the bridge without a physical interface. > > > > Regards, > > Dag Sonstebo > > Cloud Architect > > ShapeBlue > > > > > > dag.sonst...@shapeblue.com<mailto:dag.sonst...@shapeblue.com> > > www.shapeblue.com<http://www.shapeblue.com> > > 53 Chandos Place, Covent Garden, London WC2N 4HSUK > > @shapeblue > > > > > > > > On 29/03/2018, 11:14, "Parth Patel" <parthpatel2...@gmail.com > <mailto: > > parthpatel2...@gmail.com>> wrote: > > > > Hi Dag, > > > > Thanks for helping me understand the requirement of advanced > > networking. > > Sorry if I have missed something obvious or my question seems > stupid, > > but I > > am just starting to learn. Can you help me out on how to setup > VLAN > > "tagging" on one machine? I have tried several methods and > tutorials I > > could find on the internet for VLANs, but none mention "tagging". > > > > Also, I do not fully understand private virtual bridge..... > Means I > > create > > an interface file for bridge but mention no physical interface > device? > > Is > > it similar to how cloud0 is configured for link local network of > System > > VMs? I could probably do that, but I don't know much about > configuring > > VLAN > > tagging. I would appreciate if you could give me some guidance or > > point me > > where you think some good documentation is given for CentOS/RHEL > hosts > > for > > configuring bridges with VLAN tagging (I have tried but failed to > > understand most of them). I am especially stuck at understanding > this > > "tagging" of VLANs. > > > > Thanks, > > Parth Patel > > > > On Thu, 29 Mar 2018 at 15:17 Dag Sonstebo < > dag.sonst...@shapeblue.com > > <mailto:dag.sonst...@shapeblue.com>> > > wrote: > > > > > Hi Parth, > > > > > > Yes and no. > > > > > > No – you cannot do advanced zones with *all three* KVM hosts > and > > advanced > > > networking without using VLANs (or another isolation > mechanism) and > > still > > > expect traffic to flow between VMs/VRs on different KVM hosts. > > > > > > Yes – you can probably do this *on a single KVM host* – but > you will > > have > > > to use VLAN tagging internally – this can however be done on a > > virtual > > > bridge interface, i.e. the L2 traffic doesn’t ever leave that > host. > > > > > > Without deep diving into this I think it would look like this: > > > > > > Physical eth0 -> cloudbr0 > handles management and public > > > No nic -> private virtual bridge cloudbr1 > handles isolated > guest > > traffic > > > but allows for isolated VLANs internally on the host > > > > > > Regards, > > > Dag Sonstebo > > > Cloud Architect > > > ShapeBlue > > > > > > > > > dag.sonst...@shapeblue.com<mailto:dag.sonst...@shapeblue.com> > > > www.shapeblue.com<http://www.shapeblue.com> > > > 53 Chandos Place, Covent Garden, London WC2N 4HSUK > > > @shapeblue > > > > > > > > > > > > On 29/03/2018, 09:25, "Parth Patel" <parthpatel2...@gmail.com > > <mailto:parthpatel2...@gmail.com>> wrote: > > > > > > Hi Dag, > > > > > > Thanks for the reply. I am trying to use Shapeblue CCS > > (Container as a > > > Service) with ACS, but for that Isolated networks are > required > > which > > > are > > > only available in Advanced Zone. Further, I want to explore > > Cloudstack > > > further and am also aiming to test and configure other > advanced > > > features > > > such as load balancing and auto scaling without netscaler > > device. For > > > that > > > I badly need Advanced Zone networking (especially isolated > > networks > > > offerings). I just want to know if Advanced Zone can > succesfully > > > function > > > with two networks, one physcial NIC and no VLAN tagging. > > > > > > Thanks, > > > Parth Patel > > > > > > On Thu, 29 Mar 2018 at 13:48 Dag Sonstebo < > > dag.sonst...@shapeblue.com<mailto:dag.sonst...@shapeblue.com>> > > > wrote: > > > > > > > Hi Parth, > > > > > > > > Not sure if I follow. Generally, your management network > is > > untagged, > > > > whilst your public and isolated networks tagged. The > > underlying idea > > > of > > > > advanced zones is you must have network isolation between > > multiple > > > guest > > > > networks, otherwise you have no privacy/security. You > can do > > this > > > either at > > > > L2 with VLAN tagging, which is the simplest, or with L3 > using > > > various SDN > > > > overlay network solutions (more complicated and comes at > > < > https://maps.google.com/?q=ork+solutions+(more+complicated+and+comes+at+&entry=gmail&source=g > >a > > cost). > > > > > > > > If you don’t want to tag anything you’re probably better > off > > using > > > basic > > > > networks, where I believe you could use a single flat > subnet > > (happy > > > to be > > > > proven wrong). > > > > > > > > Regards, > > > > Dag Sonstebo > > > > Cloud Architect > > > > ShapeBlue > > > > > > > > > > > > dag.sonst...@shapeblue.com<mailto: > dag.sonst...@shapeblue.com> > > > > www.shapeblue.com<http://www.shapeblue.com> > > > > 53 Chandos Place, Covent Garden, London WC2N 4HSUK > > > > @shapeblue > > > > > > > > > > > > > > > > On 29/03/2018, 08:48, "Parth Patel" < > parthpatel2...@gmail.com > > <mailto:parthpatel2...@gmail.com>> > > > wrote: > > > > > > > > Hi all, > > > > > > > > After banging my head with different network > configuration > > > > permutations, I > > > > don't understand what is the issue with Network Guru > here > > and > > > why it > > > > can't > > > > implement the isolated guest network. I just want to > know > > if > > > Advanced > > > > Zone > > > > can be successfully setup or has someone configured > an > > advanced > > > zone > > > > using > > > > untagged VLAN traffic? > > > > > > > > I have the following configuration of components: > > > > - I have 3 (16 GB Ram and 4 Cores) machines each > with 1 > > physical > > > NIC. > > > > - I have two networks: 192.168.20.0/24< > > http://192.168.20.0/24> (using this for isolated > > > guest > > > > network) and 172.16.20.0/16<http://172.16.20.0/16> > > (management server and NFS servers > > > > network) > > > > - I am using KVM hypervisor and NFS for storage. > > > > - Currently, the output of brctl show is (when the > > Cloudstack is > > > not > > > > running, other wise the interface are populated with > three > > vnets > > > for > > > > cloud0 > > > > and 4-5 vnets for cloudbr0): > > > > bridge name bridge id STP enabled > > > interfaces > > > > cloud0 8000.000000000000 no > > > > cloudbr0 8000.3464a92a083a no > > > eno1 > > > > virbr0 8000.525400daae23 yes > > > virbr0-nic > > > > > > > > My earlier doubt was if I can configure advanced > zone with > > one > > > physical > > > > interface available in each host, but that was > resolved > > when I > > > read > > > > this > > > > post of ShankerBalan: > > > > > > > > > > > > > > https://shankerbalan.net/blog/cloudstack-simple-advanced-network-example/ > > > > > > > > ACS throws InsufficientVirtualNetworkCapacity > exception and > > > lines like: > > > > "NetworkGuru can't implement network [275||15]" are > > printed in > > > > management > > > > server logs when I try to create a simple CentOS 5.5 > NoGUI > > KVM > > > instance > > > > after a complete and fresh install of ACS (even of > CentOS). > > > > > > > > My main doubt here is if I can successfully > configure an > > > advanced zone > > > > with > > > > two networks but with untagged VLAN traffic ? I can't > > currently > > > > configure > > > > the router or switches to allow tagged VLAN > networking as > > I am > > > doing > > > > this > > > > project in my university. But, I have requested and > gained > > > access to > > > > the > > > > mentioned two networks: 192.168.20.0/24< > > http://192.168.20.0/24> and 172.16.20.0/16<http://172.16.20.0/16> > and > > > both > > > > networks are pingable and have internet access > across all > > three > > > > machines. > > > > Can anyone help me with this please? > > > > > > > > Thanks, > > > > Parth Patel > > > > > > > > > > > > > > > > > > > > > > > > > > > >
