Re: SSH issue in SG enabled advanced zone

2014-01-20 Thread Jayapal Reddy Uradi
It is ebtables in previous mail, ebtables is auto corrected by my mail client :) On 21-Jan-2014, at 11:37 AM, Jayapal Reddy Uradi wrote: > Hi Gaurav, > > Network mode should be bridge for SG rules work. > > Some of security group rules (iptables rules) are configured match the > traffic in

Re: SSH issue in SG enabled advanced zone

2014-01-20 Thread Jayapal Reddy Uradi
Hi Gaurav, Network mode should be bridge for SG rules work. Some of security group rules (iptables rules) are configured match the traffic in/out from the bridge. Also eatables rules needs bridge. Cloudstack Basic and Advanced needs bridge mode for SG networks. Thanks, Jayapal 1. On 20-Jan-20

Re: SSH issue in SG enabled advanced zone

2014-01-20 Thread Gaurav Aradhye
Hi Jayapal, CSP is installed but the network mode is set to openvswitch. Should it be "bridge"? Here are few doubts. 1) Does Security Group feature always requires network mode set to bridge irrespective of basic or advanced zone setup? 2) In what scenarios we will need it to be openvswitch / b

Re: SSH issue in SG enabled advanced zone

2014-01-20 Thread Jayapal Reddy Uradi
Hi Gaurav, Did you install CSP in xenserver ? Is host network mode set to bridge ? check file /etc/xensource/network.conf for 'bridge' >From the host iptables, there are no SG rules got configured. Thanks, Jayapal On 20-Jan-2014, at 12:27 PM, Gaurav Aradhye wrote: > Hello all, > > I am fa