Hi Paul, To answer your two questions
1. If using VMware, you can tag the Management Network, but if using say XenServer you cannot. We tend to stick to using Access Ports on switches to look after the tagging, even with a pure VMware build, as you never know if you might add XenServer in future. 2. It's because VMware does not support link local that IPs from the Management/POD/Reserved CIDR get used (I listed all three as the documents confuse them, when they are actually all the same). The install guide highlights the need to allocate a large enough CIDR to cover all the Hosts, System VMs and Guest Virtual Routers etc within a POD. You may find the slides from the presentation "Introduction To CloudStack Networking" I gave at the CloudStack Collaboration Conference in Vegas last year helpful. http://www.slideshare.net/gsirett/introduction-to-cloudstack-networking Regards Geoff Higginbottom CTO / Cloud Architect D: +44(0)20 3603 0542<tel:+442036030542> | S: +44(0)20 3603 0540<tel:+442036030540> | M: +44(0)7968161581<tel:+447968161581> geoff.higginbot...@shapeblue.com<mailto:geoff.higginbot...@shapeblue.com> | www.shapeblue.com ShapeBlue Ltd, 53 Chandos Place, Covent Garden, London, WC2N 4HS On 28 Feb 2013, at 11:02, "Paul Sanders" <paul.sander...@gmail.com<mailto:paul.sander...@gmail.com>> wrote: Thanks Geoff. To prove the issue, I have added a second NIC to my management server and added it to cloud.private.untagged.0.1-vswitch1. This is now working. Should my server be connected to this? This makes me question a few other networking confusions: 1) Is the management network always untagged? If so, how can we route between hosts. At present I am using a native vlan on that vswitch network port. 2) As vmware doesn't have a 'Link Local' address, why is it assigning IP addresses from my management network. And is this as secure? Thanks Paul --- Kind Regards Paul Sanders Mob: 07988 725 883 Mail: paul.sander...@googlemail.com<mailto:paul.sander...@googlemail.com> On 28 February 2013 12:54, Geoff Higginbottom < geoff.higginbot...@shapeblue.com<mailto:geoff.higginbot...@shapeblue.com>> wrote: Paul, This stinks of an error with your VLAN Mappings, double check all your VLAN settings. Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com<mailto:geoff.higginbot...@shapeblue.com> -----Original Message----- From: Paul Sanders [mailto:paul.sander...@gmail.com] Sent: 28 February 2013 07:51 To: cloudstack-users Subject: Virtual Router Uncontactable Hello All, I am having an issue with my virtual networks. I have compiled 4.0.1 from source and have added the nonoss components. I have added my VMWare cluster and the system VMs have deployed without issue. When I create a new network and create an instance for my tenant, the systems are router is created, but my management server is unable to contact it: 2013-02-27 06:05:15,642 INFO [vmware.resource.VmwareResource] (DirectAgent-12:demo-esxi01.demo.local) Could not connect to 192.168.15.214 due to java.net.ConnectException: Connection timed out I am unable to ping the 192.168.15.214 device. After a while, the VM is shut down and my instance creation is not created. --- Kind Regards Paul Sanders Mail: paul.sander...@googlemail.com<mailto:paul.sander...@googlemail.com> ShapeBlue provides a range of strategic and technical consulting and implementation services to help IT Service Providers and Enterprises to build a true IaaS compute cloud. ShapeBlue’s expertise, combined with CloudStack technology, allows IT Service Providers and Enterprises to deliver true, utility based, IaaS to the customer or end-user. ________________________________ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue provides a range of strategic and technical consulting and implementation services to help IT Service Providers and Enterprises to build a true IaaS compute cloud. ShapeBlue’s expertise, combined with CloudStack technology, allows IT Service Providers and Enterprises to deliver true, utility based, IaaS to the customer or end-user. ________________________________ This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales.