manasaveloori created CLOUDSTACK-8843:
-----------------------------------------
Summary: Guest VMs are not getting IPs as the DHCP port is not
opened in VR
Key: CLOUDSTACK-8843
URL: https://issues.apache.org/jira/browse/CLOUDSTACK-8843
Project: CloudStack
Issue Type: Bug
Security Level: Public (Anyone can view this level - this is the default.)
Components: Network Controller
Affects Versions: 4.6.0
Reporter: manasaveloori
Priority: Critical
Fix For: 4.6.0
1. Deployed CS with latest build.
2. Deployed a guest VM.
3. VM is not assigned any ip address.
Observation:
In VR 67 port is not opened
root@r-9-VM:~# iptables-save
# Generated by iptables-save v1.4.14 on Mon Sep 14 09:02:39 2015
*filter
:INPUT DROP [10:3400]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [117:15233]
:FW_OUTBOUND - [0:0]
:NETWORK_STATS - [0:0]
-A INPUT -j NETWORK_STATS
-A INPUT -d 224.0.0.18/32 -j ACCEPT
-A INPUT -d 225.0.0.50/32 -j ACCEPT
-A INPUT -i eth2 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth1 -p tcp -m tcp --dport 3922 -m state --state NEW,ESTABLISHED -j
ACCEPT
-A FORWARD -j NETWORK_STATS
-A OUTPUT -j NETWORK_STATS
-A FW_OUTBOUND -m state --state RELATED,ESTABLISHED -j ACCEPT
-A NETWORK_STATS -i eth0 -o eth2
-A NETWORK_STATS -i eth2 -o eth0
-A NETWORK_STATS ! -i eth0 -o eth2 -p tcp
-A NETWORK_STATS -i eth2 ! -o eth0 -p tcp
COMMIT
# Completed on Mon Sep 14 09:02:39 2015
# Generated by iptables-save v1.4.14 on Mon Sep 14 09:02:39 2015
*nat
:PREROUTING ACCEPT [83:8482]
:INPUT ACCEPT [25:1716]
:OUTPUT ACCEPT [5:380]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o eth2 -j SNAT --to-source 10.147.47.7
COMMIT
# Completed on Mon Sep 14 09:02:39 2015
# Generated by iptables-save v1.4.14 on Mon Sep 14 09:02:39 2015
*mangle
:PREROUTING ACCEPT [391:44422]
:INPUT ACCEPT [367:42880]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [342:47621]
:POSTROUTING ACCEPT [342:47621]
:FIREWALL_10.147.47.7 - [0:0]
:VPN_10.147.47.7 - [0:0]
-A PREROUTING -d 10.147.47.7/32 -j FIREWALL_10.147.47.7
-A PREROUTING -d 10.147.47.7/32 -j VPN_10.147.47.7
-A PREROUTING -m state --state RELATED,ESTABLISHED -j CONNMARK --restore-mark
--nfmask 0xffffffff --ctmask 0xffffffff
-A PREROUTING -i eth2 -m state --state NEW -j CONNMARK --set-xmark
0x2/0xffffffff
-A POSTROUTING -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill
-A FIREWALL_10.147.47.7 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FIREWALL_10.147.47.7 -j DROP
-A VPN_10.147.47.7 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A VPN_10.147.47.7 -j RETURN
COMMIT
# Completed on Mon Sep 14 09:02:39 2015
root@r-9-VM:~#
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
