Sheng, Following are the review comments on network-inline mode functional spec: 1.Feature Specifications: Only support "per zone"(shared) Source NAT for SRX: Does this mean traffic initiated from all the accounts guest vms will use only one ip as source IP ? 2.Is it supported in upgraded environment? 3.After upgrade from 2.2.x to 3.0.x can we change parallel mode deployment to inline mode (since we don't support upgrade from 2.2.x inline mode)? 4.Can we create Static NAT and Load Balancing rule on the same public IP(since conserve mode is on)? 5.Is it supported in VPC(Instead of vpcVR can we use SRX for all the services in VPC Offering)? 6.Are there any DB schema changes related to this feature?
Following are review comments for "Remote access vpn on SRX": 1. Is it supported on Source NAT IP? 2. Is enabling Remote access vpn on SRX and adding VPN user supported only by Admin ? 3. Any manual configuration is required on SRX to enable this functionality? Thanks, Sanjeev From: Sheng Yang Sent: Thursday, October 11, 2012 11:14 PM To: Sanjeev Neelarapu Cc: Haroon Abdelrahman; Sudha Ponnaganti; Srinivas Vejalla Subject: RE: F5 SRX in inline mode and Remote access vpn on SRX They are already on cwiki. https://cwiki.apache.org/CLOUDSTACK/network-inline-mode-functional-spec.html https://cwiki.apache.org/CLOUDSTACK/remote-access-vpn-support-on-srx.html --Sheng From: Sanjeev Neelarapu Sent: Thursday, October 11, 2012 12:14 AM To: Sheng Yang Cc: Haroon Abdelrahman; Sudha Ponnaganti; Srinivas Vejalla Subject: F5 SRX in inline mode and Remote access vpn on SRX Sheng, Can you place "F5 SRX in inline mode" and "Remote access vpn on SRX" FSs on cwiki , so that I can use them to share my review comments on ML. At present "Remote access vpn on SRX" FS is missing from cloud stack wiki as well. Thanks, Sanjeev
