Hi Ghait, This doesn’t sound like normal behavior for XenServer 6.5 under CloudStack – I’m not aware of any issues requiring the XS firewall to be modified.
I would suggest rebuilding your hosts and re-add to CloudStack. With regards to OpenManage – I can see this does require some tweaking of firewalls (http://blog.hostduplex.com/2015/01/31/install-dell-openmanage-xenserver-6-5/ ) – but even this doesn’t require you to disable the firewall (this blog post suggests just adding a rule and restarting iptables). All in all my advice would be to troubleshoot and fix the underlying issue rather than disabling iptables – which could be a potential security issue. Regards, Dag Sonstebo Cloud Architect ShapeBlue On 21/11/2016, 09:39, "Ghaith Bannoura" <[email protected]> wrote: The purpose for it as below : 1-the system VMs agent showing not running , after I stopped the firewall in xenservers its working normally 2-the instances accessible only when I stop the iptables from xenservers 2- I installed open manage in the servers (Manage hardware for Dell servers) that need changes from iptables ) I have advanced zone with ACS 4.8 and xenserver 6.5 Best Regards, EtQ, Inc. Ghaith Bannoura Senior System Administrator MCT, MCSE (Messaging, Server Infrastructure) MCSA (Windows Server 2008, 2012), MCP Phone: +9626-537-0923 Ext. 376 P [email protected] G http://www.etq.com -----Original Message----- From: Dag Sonstebo [mailto:[email protected]] Sent: Monday, November 21, 2016 11:05 AM To: [email protected] Subject: Re: Firewall on xenserver Hi Ghait, Can you explain your rationale - i.e. what is the purpose of you changing XenServer firewall rules? Citrix seems to have a how-to article on https://support.citrix.com/article/CTX123930 . Regards, Dag Sonstebo Cloud Architect ShapeBlue On 21/11/2016, 08:14, "Ghaith Bannoura" <[email protected]> wrote: Hello All, I have ACS 4.8 with xenserver 6.5 I modified the iptables in xenserver and its returned back as default , also I stopped the iptables many times and its returned running again . Can you please advice where I can modify iptables permanently in xenserver . Best Regards, EtQ, Inc. Ghaith Bannoura Senior System Administrator MCT, MCSE (Messaging, Server Infrastructure) MCSA (Windows Server 2008, 2012), MCP * Phone: +9626-537-0923 Ext. 376 * [email protected] <mailto:[email protected]> * http://www.etq.com<http://www.etq.com/> [email protected] www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue [email protected] www.shapeblue.com 53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
