<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","serif";
mso-fareast-language:EN-US;}
span.E-MailFormatvorlage18
{mso-style-type:personal;
font-family:"Calibri","serif";
color:windowtext;}
span.E-MailFormatvorlage19
{mso-style-type:personal-reply;
font-family:"Calibri","serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:2040466794;
mso-list-type:hybrid;
mso-list-template-ids:-729378446 67567631 67567641 67567643 67567631 67567641 67567643 67567631 67567641 67567643;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Hi folks,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>I figured it out myself. It had to do with the automatically generated VLAN ids from OpenvSwitch and the VMs not being on the same physical host. As it seems my Cisco router would not allow these high(?) VLAN IDs. I tried setting the VLAN Id to “5” manually and it worked! <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>A quick view into Ciscos manual showed that in “normal VLAN” mode VLAN Ids are only allowed to range between 1 and 1002. One can of course activate “Extended VLAN “ mode and then you may provide VLAN IDs between 1006 and 4094. Is there a possibility to set a range for the automatically generated vlan ids?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Cheers,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Christian<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='mso-fareast-language:DE'>Von:</span></b><span lang=EN-US style='mso-fareast-language:DE'> Users [mailto:users-bounces@lists.opennebula.org] <b>Im Auftrag von </b>Hüning, Christian<br><b>Gesendet:</b> Mit</span><span style='mso-fareast-language:DE'>twoch, 10. September 2014 12:57<br><b>An:</b> users@lists.opennebula.org<br><b>Betreff:</b> [one-users] Problem with Virtual Router 4.8<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US>Hi there,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>i’ve got openVSwitch running in my environment and can effectively provide vlan isolation. I now have 3 VMS which are in an isolated network (10.10.0.0/24) and can ping each other. I’ve got a bunch of other VMs outside (141.22.29.0/24) and now wanted to connected these two networks with the Virtual Router Appliance. However after setting the appliance up regarding to the documentation, the routing effectively won’t work. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>The behavior is as follows:<o:p></o:p></span></p><p class=MsoListParagraph style='text-indent:-18.0pt;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>1.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>I can access the VR via SSH<o:p></o:p></span></p><p class=MsoListParagraph style='text-indent:-18.0pt;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>2.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>The VR can reach the public network<o:p></o:p></span></p><p class=MsoListParagraph style='text-indent:-18.0pt;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>3.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>The VR can NOT ping the VMs in the private network<o:p></o:p></span></p><p class=MsoListParagraph style='text-indent:-18.0pt;mso-list:l0 level1 lfo2'><![if !supportLists]><span lang=EN-US><span style='mso-list:Ignore'>4.<span style='font:7.0pt "Times New Roman"'> </span></span></span><![endif]><span lang=EN-US>I forward port 80 to a VM “inside” , this of course does not work.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Here’s my Context Set for the VR:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>CONTEXT=[<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>DHCP="NO",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>DNS="141.22.192.100 141.22.29.101",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>FORWARDING="10.10.0.2:80",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>NETWORK="YES",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>NTP_SERVER="141.22.192.100",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>PRIVNET="$NETWORK[TEMPLATE, NETWORK=\"MARS SimulationNetwork ISO\"]",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>PUBNET="$NETWORK[TEMPLATE, NETWORK=\"MARSNetwork\"]",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>RADVD="NO",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>SEARCH="local.domain",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>SSH_PUBLIC_KEY="$USER[SSH_PUBLIC_KEY]",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>TARGET="hdb",<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>TEMPLATE="$TEMPLATE"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>I am a bit lost here. NMAP however shows that port 80 is in “filtered” state on the router.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Any suggestions?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Cheers,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>christian<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:DE'>-----------------------------------------------<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:DE'>Christian Hüning, BSc.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:DE'>Fakultät Technik und Informatik, Department I</span><span style='mso-fareast-language:DE'>nformatik<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:DE'>Berliner Tor 7<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:DE'>20099 Hamburg<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:DE'>Tel.: +49 40 / 42875 - 8436 <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:DE'>Mobil: +49 40 / 180 55 44 5<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:DE'>Web: <a href="http://www.mars-group.org">http://www.mars-group.org</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='mso-fareast-language:DE'><o:p> </o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>