@Kevin I am using nova vlan manager , adding rule for every vlan would be then one more task todo.<br><br>This is first scenerio<br><br>In my case i am using nova-network with vlan manager , so i would like to use my <br>own
router instead of the bridge that openstack creates, even i have
implemented inter-vlan routing , i want some vlans to commmunicate to a
single vlan, but not those vlans with each other. <br>
<br>Second Scenerio<br><br>If i use a external router , and implemented
inter-vlan routing , still my vlans communication is blocked by nova
security group thats why i need to disable security group.<br><br>@Kiall , i think this flag would work i once used in for quantum,i would try this.<br> <br><div class="gmail_quote">On Wed, Nov 21, 2012 at 7:44 PM, Kevin Jackson <span dir="ltr"><<a href="mailto:kevin@linuxservices.co.uk" target="_blank">kevin@linuxservices.co.uk</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Ritesh,<br>You will need to have enabled some rules - even if you provide rules that give carte blanch access to your instances. This is courtesy of the 'default' security group - that by design prevents any access and by design, is a default if you don't specify any security groups when launching instances.<br>
<br>Whilst its easy to say you shouldn't do what you're intending to do and relying on perimeter security alone, that is not what you're asking and I'm all for choice and learning.<br><br>So in your instance:<br>
<br>nova secgroup-add-rule default tcp 0 65536 <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a><br>nova secgroup-add-rule default udp 0 65536 <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a><br>nova secgroup-add-rule default icmp -1 -1 <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a><br>
<br>Note this is the netsec equivalent of doing chmod 777 on a file.<br><br>To actually delete groups though<br><br>nova secgroup-delete nameOfGroup<br><br>Regards,<br>Kev<br><div class="gmail_extra"><br><br><div class="gmail_quote">
<div><div>
On 21 November 2012 13:45, Ritesh Nanda <span dir="ltr"><<a href="mailto:riteshnanda09@gmail.com" target="_blank">riteshnanda09@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>
Hello, <br><br>Is there anyway we can disable security group in nova, as i would be using an external firewall to do that.<span><font color="#888888"><br clear="all"><br>-- <br><p style="margin:0cm 0cm 0pt;color:rgb(0,0,153)">
<b><span style="font-size:10pt;font-family:Arial"> With Regards <br>
</span></b></p><p style="margin:0cm 0cm 0pt;color:rgb(0,0,153)"><b><span style="font-size:10pt;font-family:Arial"> Ritesh Nanda<br></span></b></p><p style="margin:0cm 0cm 0pt;color:rgb(0,0,153)"></p><p style="margin:0cm 0cm 0pt;color:rgb(51,51,51)">
<span style="color:rgb(0,0,153)"></span><span style="font-size:9pt;color:rgb(51,51,51);font-family:Arial"><span style="color:rgb(51,51,255)"><b><span style="color:rgb(0,0,153)"></span></b></span></span><span style="font-size:9pt;color:rgb(51,51,51);font-family:Arial"><span style="color:rgb(51,51,255)"><b><span style="color:rgb(0,0,153)"><br>
</span></b></span></span></p><a href="http://www.ericsson.com/" target="_blank"></a><p style="margin:0cm 0cm 0pt"><span style="font-size:9pt;font-family:Arial"><br><br></span></p><br>
</font></span><br></div></div>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><span><font color="#888888"><br><br clear="all"><br>-- <br>Kevin Jackson<br>@itarchitectkev<br>
</font></span></div>
</blockquote></div><br><br clear="all"><br>-- <br><p style="margin:0cm 0cm 0pt;color:rgb(0,0,153)"><b><span style="font-size:10pt;font-family:Arial"> With Regards <br></span></b></p><p style="margin:0cm 0cm 0pt;color:rgb(0,0,153)">
<b><span style="font-size:10pt;font-family:Arial"> Ritesh Nanda<br></span></b></p><p style="margin:0cm 0cm 0pt;color:rgb(0,0,153)"></p><p style="margin:0cm 0cm 0pt;color:rgb(51,51,51)"><span style="color:rgb(0,0,153)"></span><span style="font-size:9pt;color:rgb(51,51,51);font-family:Arial"><span style="color:rgb(51,51,255)"><b><span style="color:rgb(0,0,153)"></span></b></span></span><span style="font-size:9pt;color:rgb(51,51,51);font-family:Arial"><span style="color:rgb(51,51,255)"><b><span style="color:rgb(0,0,153)"><br>
</span></b></span></span></p><a href="http://www.ericsson.com/" target="_blank"></a><p style="margin:0cm 0cm 0pt"><span style="font-size:9pt;font-family:Arial"><br><br></span></p><br>