Re: Default firewall and egress rule

2021-10-21 Thread Wei ZHOU
Hi Irvin, To access a vm in an isolated network, you need to use static nat, port forwarding or load balancer. Please refer to http://docs.cloudstack.apache.org/en/4.15.2.0/adminguide/networking/ip_forwarding_and_firewalling.html -Wei On Thu, 21 Oct 2021 at 11:09, SVI wrote: > Thanks Wei! Ano

Re: Default firewall and egress rule

2021-10-21 Thread SVI
Thanks Wei! Another thing, can I set a default firewall rule? For egress, I’ll check the networking offering Thanks, Irvin > On Oct 21, 2021, at 4:44 PM, Wei ZHOU wrote: > > Hi SVI, > > It looks like you do use an advanced zone. > > If your users create vm on isolated networks, please see my

Re: Default firewall and egress rule

2021-10-21 Thread Wei ZHOU
Hi, As I said, please give more details. Otherwise, it is hard to answer your questions. for example, zone type, network type, hypervisor ... -Wei On Thu, 21 Oct 2021 at 09:49, SVI wrote: > Hi Wei, > > Unfortunately, I am not using advanced zone. And yes, the Cloudstack UI > (4.15.2) is exp

Re: Default firewall and egress rule

2021-10-21 Thread SVI
Hi Wei, Unfortunately, I am not using advanced zone. And yes, the Cloudstack UI (4.15.2) is exposed to users. Thanks. > On Oct 21, 2021, at 2:37 PM, Wei ZHOU wrote: > > Hi, > > I assume you use isolated networks in advanced zone. > the firewall rule list is empty by default, egress rule can

Re: Default firewall and egress rule

2021-10-20 Thread Wei ZHOU
Hi, I assume you use isolated networks in advanced zone. the firewall rule list is empty by default, egress rule can be "allow all" or "deny all" per network(check 'default egress policy' of network offering) Do you expose cloudstack api/ui to users ? It's better to give more details. -Wei On T