Can you please send iptables rules on VR 'iptables -t nat -L -nv' . also do tcpdump on the interface to see whether it is routing or nat issue. On 10 Aug 2015 5:57 pm, "罗冲（(深圳联友科技有限公司 信息技术中心 新技术应用领域)）" < [email protected]> wrote:
> Hi all, > > Cloustack version: 4.2 > Hypervisor: vmware > Static NAT Config: > 0.0.0.0/0 ICMP -1 -1 > 0.0.0.0/0 UDP 1 > 65535 > 0.0.0.0/0 TCP 1 > 65535 > OS: CentOS 6.2 64bits > > Scenario: > 1) Create one vritual machine though Cloudstack > 2) Config the static NAT and log in this virtual machine. > 3) Running the TCP Server in this virtual machine > 4) another real machine as TCP client. (The two machines can be > ping) > I found The TCP connection could not be created. > > With tcpdump, i can capture the tcp SYN message from client in server > machine. > 06:16:35.940145 IP 172.26.228.81.53506 > > 36f99eab-d7c8-4e14-b1fb-221e3d15aac7.dnp-sec: Flags [S], seq 898177152, win > 14600, options [mss 1460], length 0 > > but the server fail to reply SYN ACK message to client. > > > > Thanks & Regards > > > > > > [email protected]
