yes. But ssvm and cpvm might not work well because of the ip routes in them. You should work out a better design.
-Wei On Friday, 16 September 2022, [email protected] < [email protected]> wrote: > *@*Jordan Thanks. > > ** > > *server A* and > *server B* > both server have only one interface using public traffic. > > no any LAN interface for internal communication. > > both server are host on cloud dedicated server. > > can I create AD zone + security group using only *WAN* interface? > > I am with *@**namhost.* > > *Thanks. * > > On 9/16/2022 5:35 PM, jordan j wrote: > >> This means the MGM server cannot connect to the SSVMs. >> Go to gui -> Infrastructure -> alerts and check what is being reported >> there. >> Also ssh to CS and check >> /var/log/cloudstack/management/management-server.log for any errors or >> warning messages. >> >> From the top of my head without looking at the environment i can provide >> the following clue: >> - SSVMs have 3 internfaces: >> -> local one shared with the hypervisor >> -> public one in the public network >> -> management one in the management network >> >> Now when your vms are on the KVM i am not sure if the management interface >> is actually working properly because from the topology showed mgm network >> is on the ACS server host only. >> >> So i assume ACS try to connect on SSVM mgm interfaces but they are not >> responding. >> >> Regards, >> Jordan >> >> >> On Fri, Sep 16, 2022 at 1:42 PM Granwille Strauss<[email protected]> >> wrote: >> >> Hi Jordan >>> >>> Thank you. We managed to set up /28 & /29 subnet via 1 NIC on KVM host >>> and >>> /29 on Cloudstack MS. However, we seem to have an issue with our SSVM >>> agent not connecting to MS. Yesterday it was working fine and now with >>> re-deployment it just does not want to connect for some reason. >>> >>> We have the following physical network configs in place: >>> >>> - shared guest network- /28 from KVM host >>> - management network - /29 from Cloudstack MS host >>> - public network - /29 from KVM host >>> >>> See attached screenshots for more details. Do you have any idea why SSVM >>> would be causing this? At this time we cannot upload templates, because >>> they never seem to download. >>> On 9/16/22 09:55, jordan j wrote: >>> >>> Cloudstack MGM server needs only 1 ip that is used: >>> - for users to access GUI/API >>> - for Cloudstack to contact the hypervisor >>> >>> So the answer is yes, the larger network should go to the KVM host. >>> >>> >>> On Fri, Sep 16, 2022 at 10:07 AM Granwille Strauss<[email protected] >>> > <[email protected]> >>> wrote: >>> >>> >>> Hi Jordan >>> >>> Do I understand correctly that it would be better to have bigger subnet, >>> /28 on the KVM server and NOT on the Cloudstack MGMT server? >>> >>> The plan is to have Shared network + security group with full public IP >>> space, not Private IP. Because we want to launch VPS that is publicly >>> accessible. >>> On 9/16/22 09:00, jordan j wrote: >>> >>> Hi, >>> >>> Should I assume that Server 1: Cloud MGMT is where Cloudstack management >>> server will be installed? so you will have one ip from 31.72.136.230/28 >>> and >>> the rest will be unusable (as the KVM host will not have access to them). >>> Regarding Server 2: KVM (Plug public ip usable 5) 51.42.126.116/29 if >>> you >>> have 5 ips ,first plan reservation based on network services you want. >>> >>> here is what you have: >>> - kvm host - requires 1 ip, probably at start or end of the range so the >>> other 4 can be used in a range. >>> - WIll you have a VR to provide userdata,dhcp,dns or other services? - >>> yes >>> - then you need 1 ip for it. >>> - the other 3 will be for vms. >>> >>> Once you have the plan, install Server 1 and try the basic zone wizard. >>> >>> Regards, >>> Jordan >>> >>> >>> On Thu, Sep 15, 2022 at 6:41 [email protected] < >>> [email protected]> <[email protected]> wrote: >>> >>> >>> Hi, >>> >>> We have dedicated public server, so I want to setup basic zone first, >>> when I success then I create AD zone. >>> >>> Server 1: Cloud MGMT (Plug public ip usable 6) 31.72.136.230/28 >>> Server 2: KVM (Plug public ip usable 5) 51.42.126.116/29 >>> >>> Basic Zone setup ? >>> >>> AD zone setup? >>> >>> Which public ip range can I use for vm Instance ? >>> >>> Please help me. >>> >>> >>> -- >>> >>> *Thanks & Regards.* >>> >>> *Support Admin* >>> >>> ------------------------------------------------------------------------ >>> >>> *Facebook<https://www.facebook.com/TechnologyRSS> < >>> https://www.facebook.com/TechnologyRSS> <https://www.facebook.com/Tech >>> nologyRSS> <https://www.facebook.com/TechnologyRSS> | Twitter< >>> https://twitter.com/technologyrss1> <https://twitter.com/technologyrss1> >>> <https://twitter.com/technologyrss1> <https://twitter.com/technolog >>> yrss1> | YouTube<https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMux >>> udTw> <https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> < >>> https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> < >>> https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn< >>> https://www.linkedin.com/company/technologyrss/> < >>> https://www.linkedin.com/company/technologyrss/> < >>> https://www.linkedin.com/company/technologyrss/> < >>> https://www.linkedin.com/company/technologyrss/>* >>> >>> *Address : *63-B, D.I.T Road, Malibagh chowdhury para >>> >>> (Ground floor of NCC bank) >>> >>> Dhaka-1219, Bangladesh >>> >>> *Mob :* +88 01716915504 >>> >>> *Email :*[email protected] >>> >>> *Web :*www.technologyrss.com >>> >>> -- >>> Regards / Groete >>> <https://www.namhost.com> <https://www.namhost.com> Granwille >>> Strauss // Senior Systems Admin >>> >>> *e:*[email protected] >>> *m:* +264 81 323 1260 <+264813231260> >>> *w:*www.namhost.com >>> <https://www.facebook.com/namhost> <https://www.facebook.com/namhost> >>> <https://twitter.com/namhost> <https://twitter.com/namhost>< >>> https://www.instagram.com/namhostinternetservices/> < >>> https://www.instagram.com/namhostinternetservices/><https:/ >>> /www.linkedin.com/company/namhos> <https://www.linkedin.com/comp >>> any/namhos><https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA> < >>> https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA> >>> >>> <https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c >>> 9b76c140bb001ed0f818/banner> <https://www.adsigner.com/v1/l >>> /631091998d4670001fe43ec2/621c9b76c140bb001ed0f818/banner> >>> >>> Namhost Internet Services (Pty) Ltd, >>> >>> 24 Black Eagle Rd, Hermanus, 7210, RSA >>> >>> >>> >>> The content of this message is confidential. If you have received it by >>> mistake, please inform us by email reply and then delete the message. It >>> is >>> forbidden to copy, forward, or in any way reveal the contents of this >>> message to anyone without our explicit consent. The integrity and >>> security >>> of this email cannot be guaranteed over the Internet. Therefore, the >>> sender >>> will not be held liable for any damage caused by the message. For our >>> full >>> privacy policy and disclaimers, please go tohttps://www.namhost.com/priv >>> acy-policy >>> >>> [image: Powered by AdSigner]<https://www.adsigner >>> .com/v1/c/631091998d4670001fe43ec2/621c9b76c140bb001ed0f818> < >>> https://www.adsigner.com/v1/c/631091998d4670001fe43ec2/621c >>> 9b76c140bb001ed0f818> >>> >>> -- >>> Regards / Groete >>> >>> <https://www.namhost.com> Granwille Strauss // Senior Systems Admin >>> >>> *e:*[email protected] >>> *m:* +264 81 323 1260 <+264813231260> >>> *w:*www.namhost.com >>> >>> <https://www.facebook.com/namhost> <https://twitter.com/namhost> >>> <https://www.instagram.com/namhostinternetservices/> >>> <https://www.linkedin.com/company/namhos> >>> <https://www.youtube.com/channel/UCTd5v-kVPaic_dguGur15AA> >>> >>> >>> <https://www.adsigner.com/v1/l/631091998d4670001fe43ec2/621c >>> 9b76c140bb001ed0f818/banner> >>> >>> Namhost Internet Services (Pty) Ltd, >>> >>> 24 Black Eagle Rd, Hermanus, 7210, RSA >>> >>> >>> >>> The content of this message is confidential. If you have received it by >>> mistake, please inform us by email reply and then delete the message. It >>> is >>> forbidden to copy, forward, or in any way reveal the contents of this >>> message to anyone without our explicit consent. The integrity and >>> security >>> of this email cannot be guaranteed over the Internet. Therefore, the >>> sender >>> will not be held liable for any damage caused by the message. For our >>> full >>> privacy policy and disclaimers, please go to >>> https://www.namhost.com/privacy-policy >>> >>> [image: Powered by AdSigner] >>> <https://www.adsigner.com/v1/c/631091998d4670001fe43ec2/621c >>> 9b76c140bb001ed0f818> >>> >>> -- > > *Thanks & Regards.* > > *Support Admin* > > ------------------------------------------------------------------------ > > *Facebook <https://www.facebook.com/TechnologyRSS> | Twitter < > https://twitter.com/technologyrss1> | YouTube < > https://www.youtube.com/channel/UCBq7qGqFEUe6ObVHMuxudTw> | LinkedIn < > https://www.linkedin.com/company/technologyrss/>* > > *Address : *63-B, D.I.T Road, Malibagh chowdhury para > > (Ground floor of NCC bank) > > Dhaka-1219, Bangladesh > > *Mob :* +88 01716915504 > > *Email :* [email protected] > > *Web :* www.technologyrss.com >
