Windows VM instance - No outbound OR inbound traffic working

[mjstark]

Hi All,

I installed Cloudstack 4.22, with advanced networking with defaultguestnetwork CIDR 172.16.0.0/16

Seems everything is working/running, after running the config wizard. Was able to upload an ISO (WIN) and install an instance. Instance starts OK, however I have NO internet access outbound or inbound. I will point out now, that I tried with instance FW enabled and disabled and still no traffic getting through.

The configuration wizard was successful and I was able to enable and launch ZONE.

See attached files of my configuration. These are screenshots I numbered. Please have a look and let me know if anything is wrong with my configuration, most importantly, NETWORKING. My networking is a simple Class B, 172.16.0.0, with gateway address, 172.16.0.1

**

[kiranchavala]

@mjstark, what is the zone type you have created ?

Is it advanced zone with security group enabled ?

[mjstark]

Hi kiranchavala,

Yeah, I'm using core zone with advanced networking, however I'm not using security groups for my egress rules. My understanding is that inbound and outbound traffic can be configured with OR without using security groups with advanced networking.

Is it easier to configure inbound and outbound traffic using security groups, is this considered the better choice or best practice?

Secondly, I noticed I'm also using the default "Guest CIDR", ...like in your screenshot (10.1.1.0/24). Is this OK to use the default? My gateway is 172.16.0.1? and network a class B (172.16.0.0). My DefaultGeustNetwork CIDR I'm using is 172.16.0.0/16. I'm thinking my Guest CIDR for my ZONE should be 172.16.0.0/16?

Thanks for your time. Much appreciated.

Mike

[mjstark]

kiranchavala is possibly to busy to help, which is understandable.

can I get a reply on this....from anyone. I would really like to get this configured properly so I can reach "console view (consoleproxy)" from the internet along with inbound access to my instances

[kiranchavala]

@mjstark what's the windows version you are using

Let me do a quick check with 172.16.0.0/16 guest network

[mjstark]

Hi kiranchavala

Win 2025; OS of each instance shouldn't be relevant, as long as you disable the FW on the instance. Egress/Ingress rules of security groups don't care about the operating system.

That being said, I blew away Cloudstack and re-installed with advanced networking and using security groups.

Lets start from scratch starting with ZONE and CIDR. Here is my proposed configuration I would like to see. From a glance, this looks do-able. Let get the network setup properly first. Once setup, I will upload an ISO, install instance and apply/add security group with ingress/egress rules open.

Proposed configuration;

ZONE: guest CIDR
172.16.0.0/16
DNS 8.8.8.8
DNS 1.1.1.1

default GUEST network (NAT)
GW 172.16.0.1
SUB 255.255.0.0
RANGE 172.16.2.1 - 172.16.2.50

POD
reserved GW 172.16.0.1
reserved SUB 255.255.0.0
reserved range 172.16.3.1 - 172.16.2.25

STORAGE
GW 172.16.0.1
SUB 255.255.0.0
RANGE 172.16.4.1 - 172.16.4.20

Internal Network; Did this quick in P/B, so a bit messy, but the point is clear.

Thanks again.....

Let me know if you need any further information.

Kind Regards,
Mike