*@*Jordan Thanks.

**

*server A* and
*server B*
both server have only one interface using public traffic.

no any LAN interface for internal communication.

both server are host on cloud dedicated server.

can I create AD zone + security group using only *WAN* interface?

I am with *@**namhost.*

*Thanks. *

On 9/16/2022 5:35 PM, jordan j wrote:
This means the MGM server cannot connect to the SSVMs.
Go to gui -> Infrastructure -> alerts and check what is being reported
there.
Also ssh to CS and check
/var/log/cloudstack/management/management-server.log for any errors or
warning messages.

 From the top of my head  without looking at the environment i can provide
the following clue:
- SSVMs have 3 internfaces:
-> local one shared with the hypervisor
-> public one in the public network
-> management one in the management network

Now when your vms are on the KVM i am not sure if the management interface
is actually working properly because from the topology showed mgm network
is on the ACS server host only.

So i assume ACS try to connect on SSVM mgm interfaces but they are not
responding.

Regards,
Jordan


On Fri, Sep 16, 2022 at 1:42 PM Granwille Strauss<[email protected]>
wrote:

Hi Jordan

Thank you. We managed to set up /28 & /29 subnet via 1 NIC on KVM host and
/29 on Cloudstack MS.  However, we seem to have an issue with our SSVM
agent not connecting to MS. Yesterday it was working fine and now with
re-deployment it just does not want to connect for some reason.

We have the following physical network configs in place:

- shared guest network- /28 from KVM host
- management network - /29 from Cloudstack MS host
- public network - /29 from KVM host

See attached screenshots for more details. Do you have any idea why SSVM
would be causing this? At this time we cannot upload templates, because
they never seem to download.
On 9/16/22 09:55, jordan j wrote:

Cloudstack MGM server needs only 1 ip that is used:
- for users to access GUI/API
- for Cloudstack to contact the hypervisor

So the answer is yes, the larger network should go to the KVM host.


On Fri, Sep 16, 2022 at 10:07 AM Granwille Strauss<[email protected]>  
<[email protected]>
wrote:


Hi Jordan

Do I understand correctly that it would be better to have bigger subnet,
/28 on the KVM server and NOT on the Cloudstack MGMT server?

The plan is to have Shared network + security group with full public IP
space, not Private IP. Because we want to launch VPS that is publicly
accessible.
On 9/16/22 09:00, jordan j wrote:

Hi,

Should I assume that Server 1: Cloud MGMT  is where Cloudstack management
server will be installed? so you will have one ip from 31.72.136.230/28 and
the rest will be unusable (as the KVM host will not have access to them).
Regarding Server 2: KVM (Plug public ip usable 5) 51.42.126.116/29  if you
have 5 ips ,first plan reservation based on network services you want.

here is what you have:
- kvm host - requires 1 ip, probably at start or end of the range so the
other 4 can be used in a range.
- WIll you have a VR to provide userdata,dhcp,dns or other services? - yes
- then you need 1 ip for it.
- the other 3 will be for vms.

Once you have the plan, install Server 1 and try the basic zone wizard.

Regards,
Jordan


On Thu, Sep 15, 2022 at 6:41 [email protected]  
<[email protected]>  <[email protected]>  wrote:


Hi,

We have dedicated public server, so I want to setup basic zone first,
when I success then I create AD zone.

Server 1: Cloud MGMT (Plug public ip usable 6) 31.72.136.230/28
Server 2: KVM (Plug public ip usable 5) 51.42.126.116/29

Basic Zone setup ?

AD zone setup?

Which public ip range can I use for vm Instance ?

Please help me.


--

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook<https://www.facebook.com/TechnologyRSS>  <https://www.facebook.com/TechnologyRSS>  <https://www.facebook.com/TechnologyRSS>  
<https://www.facebook.com/TechnologyRSS>  | Twitter<https://twitter.com/technologyrss1>  <https://twitter.com/technologyrss1>  
<https://twitter.com/technologyrss1>  <https://twitter.com/technologyrss1>  | YouTube<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  
<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw>  | LinkedIn<https://www.linkedin.com/company/technologyrss/>  
<https://www.linkedin.com/company/technologyrss/>  <https://www.linkedin.com/company/technologyrss/>  <https://www.linkedin.com/company/technologyrss/>*

*Address : *63-B, D.I.T Road, Malibagh chowdhury para

(Ground floor of NCC bank)

Dhaka-1219, Bangladesh

*Mob :* +88 01716915504

*Email :*[email protected]

*Web :*www.technologyrss.com

--
Regards / Groete
<https://www.namhost.com>  <https://www.namhost.com>  Granwille Strauss  //  
Senior Systems Admin

*e:*[email protected]
*m:* +264 81 323 1260 <+264813231260>
*w:*www.namhost.com
<https://www.facebook.com/namhost>  <https://www.facebook.com/namhost>  <https://twitter.com/namhost>  
<https://twitter.com/namhost><https://www.instagram.com/namhostinternetservices/>  
<https://www.instagram.com/namhostinternetservices/><https://www.linkedin.com/company/namhos>  
<https://www.linkedin.com/company/namhos><https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA>  
<https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA>

<https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818/banner>
  
<https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818/banner>

Namhost Internet Services (Pty) Ltd,

24 Black Eagle Rd, Hermanus, 7210, RSA



The content of this message is confidential. If you have received it by
mistake, please inform us by email reply and then delete the message. It is
forbidden to copy, forward, or in any way reveal the contents of this
message to anyone without our explicit consent. The integrity and security
of this email cannot be guaranteed over the Internet. Therefore, the sender
will not be held liable for any damage caused by the message. For our full
privacy policy and disclaimers, please go 
tohttps://www.namhost.com/privacy-policy

[image: Powered by 
AdSigner]<https://www.adsigner.com/v1/c/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818>
  <https://www.adsigner.com/v1/c/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818>

--
Regards / Groete

<https://www.namhost.com>  Granwille Strauss  //  Senior Systems Admin

*e:*[email protected]
*m:* +264 81 323 1260 <+264813231260>
*w:*www.namhost.com

<https://www.facebook.com/namhost>  <https://twitter.com/namhost>
<https://www.instagram.com/namhostinternetservices/>
<https://www.linkedin.com/company/namhos>
<https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA>


<https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818/banner>

Namhost Internet Services (Pty) Ltd,

24 Black Eagle Rd, Hermanus, 7210, RSA



The content of this message is confidential. If you have received it by
mistake, please inform us by email reply and then delete the message. It is
forbidden to copy, forward, or in any way reveal the contents of this
message to anyone without our explicit consent. The integrity and security
of this email cannot be guaranteed over the Internet. Therefore, the sender
will not be held liable for any damage caused by the message. For our full
privacy policy and disclaimers, please go to
https://www.namhost.com/privacy-policy

[image: Powered by AdSigner]
<https://www.adsigner.com/v1/c/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818>

--

*Thanks & Regards.*

*Support Admin*

------------------------------------------------------------------------

*Facebook <https://www.facebook.com/TechnologyRSS> | Twitter <https://twitter.com/technologyrss1> | YouTube <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn <https://www.linkedin.com/company/technologyrss/>*

*Address : *63-B, D.I.T Road, Malibagh chowdhury para

(Ground floor of NCC bank)

Dhaka-1219, Bangladesh

*Mob :* +88 01716915504

*Email :* [email protected]

*Web :* www.technologyrss.com

Reply via email to