<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif"}
span.emailstyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
span.TextedebullesCar
{font-family:"Tahoma","sans-serif"}
span.EmailStyle21
{font-family:"Calibri","sans-serif";
color:#1F497D}
.MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:70.85pt 70.85pt 70.85pt 70.85pt}
-->
</style><style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1" lang="FR" link="blue" vlink="purple">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">The private network is accessible from the net namespace belonging to the router attaching your private network and the external network. As far as I know you would be able to scan
the private network from inside the namespace and not anywhere else. <br>
<br>
Do let me know if that answered your question and also if you are able to find an alternative please share.<br>
<br>
Thank you,<br>
Ageeleshwar K<br>
<br>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF859051"><font color="#000000" face="Tahoma" size="2"><b>From:</b> ZIBA Romain [Romain.ZIBA@eurogiciel.fr]<br>
<b>Sent:</b> Thursday, April 17, 2014 2:59 PM<br>
<b>To:</b> Ageeleshwar Kandavelu; openstack@lists.openstack.org<br>
<b>Subject:</b> RE: [Openstack] [Neutron] Scan IPs belongin to private networks<br>
</font><br>
</div>
<div></div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">Hi,</span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">Yes I am using neutron-openvswitch-plugin. In order to access the instances, I have an external network with router and floating ips. Otherwise, I can only access them from the controller/networking
node using IP NETNS.</span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">I would rather not scan the floating ips because an instance may not have one.</span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US"> </span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">Best regards,</span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US">Romain Z.</span></p>
<p class="MsoNormal"><span style="color:#1F497D" lang="EN-US"> </span></p>
<div>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">De :</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> Ageeleshwar Kandavelu [mailto:Ageeleshwar.Kandavelu@csscorp.com]
<br>
<b>Envoyé :</b> jeudi 17 avril 2014 09:10<br>
<b>À :</b> ZIBA Romain; openstack@lists.openstack.org<br>
<b>Objet :</b> RE: [Openstack] [Neutron] Scan IPs belongin to private networks</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"; color:black">The private networks in openstack will not be accessible from outside openstack.
<br>
<br>
Based on the kind of setup you have there are certain places from where you could launch a scan.
<br>
<br>
You have give the below information.<br>
Are you using neutron-openvswitch-plugin?<br>
How do you access the instances in the private network( do you have and external network, router and floating ip) ?<br>
<br>
Thank you,<br>
Ageeleshwar K<br>
<br>
</span></p>
<div>
<div class="MsoNormal" style="text-align:center" align="center"><span style="font-size:12.0pt; font-family:"Times New Roman","serif"; color:black">
<hr align="center" size="2" width="100%">
</span></div>
<div id="divRpF994252">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"; color:black">From:</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"; color:black"> ZIBA Romain [Romain.ZIBA@eurogiciel.fr]<br>
<b>Sent:</b> Wednesday, April 16, 2014 8:49 PM<br>
<b>To:</b> <a href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a><br>
<b>Subject:</b> [Openstack] [Neutron] Scan IPs belongin to private networks</span><span style="font-size:12.0pt; font-family:"Times New Roman","serif"; color:black"></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="color:black" lang="EN-US">Hello everyone,</span><span style="color:black"></span></p>
<p class="MsoNormal"><span style="color:black" lang="EN-US"> </span><span style="color:black"></span></p>
<p class="MsoNormal"><span style="color:black" lang="EN-US">I have an Openstack infranstructure up and running with Neutron using GRE tunnel thanks to Openvswitch. I can create networks, subnets, floating IPs and private IPs. Now, I would like to scan my VMs
for security purposes. </span><span style="color:black"></span></p>
<p class="MsoNormal"><span style="color:black" lang="EN-US">Do you know if it is possible to scan private IPs with a tool such as OpenVas?</span><span style="color:black"></span></p>
<p class="MsoNormal"><span style="color:black" lang="EN-US"> </span><span style="color:black"></span></p>
<p class="MsoNormal"><span style="color:black" lang="EN-US">Thanks beforehand & best regards.</span><span style="color:black"></span></p>
<p class="MsoNormal"><span style="color:black" lang="EN-US">Romain.</span><span style="color:black"></span></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt; font-family:"Times New Roman","serif""><a href="http://www.csscorp.com/common/email-disclaimer.php" target="_blank">http://www.csscorp.com/common/email-disclaimer.php</a>
</span></p>
</div>
</div>
</div>
</div>
http://www.csscorp.com/common/email-disclaimer.php
</body>
</html>