Anoop,

Looks like the Zone-Guest_CIDR is not specified.

You can confirm this by running the following SQL query:
select guest_network_cidr from data_center where id=<zone_id>;

-somesh

yes i didn't enter CIDR while create advanced zone, since I have VLAN range mentioned in the guest traffic while i create zone.More over i don't want 10. * CIDR for my guest VMs

mysql> select guest_network_cidr from data_center;
--------------------
| guest_network_cidr |
--------------------
| NULL |
--------------------
1 row in set (0.00 sec)

Do i need to insert guest VLAN CIDR now?

Regards,
Anoop Mohan

Hi Somesh,

I added CIDR in the zone. Now I'm abale to create VM's but the IPs are strange which is under CIDR 172.0.0.0/20, 172.0.48.0/20 where the guest isolated network i created.

If not wrong , I would be able to get guest VLAN's which I defined in guest traffic.At the same time I noted that when I create isolated guest network, the CIDR is assigned from my VLAN guest pool, but when i create VM's it changes to 172.0.0.0/20,172.0.48.0/20 for respective guest NWs etc

Anything wrong here?

I'm attaching man logs for your reference

The change of the CIDR is actually expected behavior, when using external service providers in your network offering. As you've seen, when the first instance is created, a semi-random unique CIDR is defined, to ensure that no two guest networks are using the same CIDR.

Duplicate CIDRs could cause an issue on the external device, unless it supports routing domains (and that support is integrated with CCP).

--Mike

Hi Mike,

But my question here is why it is not picking from the Guest traffic VLAN range which I defined while created zone. My expectation was assigning VLAN from the pool and create multiple guest network and spawn instances within that VLAN ranges respectively .

I need to access VMs under these conditions , has to be accessed through static NAT and Load Balancing rule has to be in source NAT for the guest network. Is that right ?

Anoop

I was replying about the seemingly random CIDR chosen during the launch of the initial instance in a new isolated network. This is expected.

If you defined a VLAN range, during zone creation, I would expect a VLAN to be chosen, again random and unique, from that range for the new isolated network. Each network will have a different VLAN and if you are using a network offering with external providers, a different CIDR. Is this not happening when the VirtualRouter, for the new network, is being launched?

To access the instance, from outside of CloudPlatform, you will either need to have a static NAT configured, using a "public" IP, or a port forwarding rule, again using a "public" IP. Another option would be a shared network, connected as a second nic on the instance.

Hope this helps.

--Mike

Hello Mike,

Thanks for your Information on this.

Now when I create LB rule for Source NAT IP, its throwing error.

2013-04-29 10:42:23,685 DEBUG [agent.manager.AgentManagerImpl] (AgentManager-Handler-7:null) Ping from 3
2013-04-29 10:42:37,710 WARN [network.lb.LoadBalancingRulesManagerImpl] (catalina-exec-5:null) Failed to create load balancer due to
java.security.InvalidParameterException: There would be multiple providers for IP X.X.X.X!
2013-04-29 10:42:37,724 ERROR [cloud.api.ApiDispatcher] (catalina-exec-5:null) Exception while executing CreateLoadBalancerRuleCmd:
com.cloud.utils.exception.CloudRuntimeException: Failed to create load balancer rule: testrule

X.X.X.X is Source NAT IP for That network

Could you recommend the best NO for adding LB rules to isolated guest VMS

I follow below

Created NO with static NAT, Source NAT , DNS, DHCP, Firewall,PF - VR and LB - F5 external device

Source NAT IP for Adding LB rules and attach Guest VM's
Static NAT for accessing guest VM's from outside

Is that the right method?

Regards,
Anoop Mohan

As the error states, you can't have two providers for a single IP. In this case, source NAT is being done by the VR and is using an IP. You can't do load balancing on this IP, with the F5. If you want to do load balancing, you will need to acquire another IP and use it for load balancing.

Hope this helps.

--Mike

Thanks Mike for the info

I acquire new IP address , add rules in it and added 2 guest vm under the rule.

Now I can't access the Public IP from outside.But when I tried to telnet public IP where LB rules is added, from the management network .I'm able to.

Log snippet

2013-05-02 09:48:22,718 WARN [cloud.network.ExternalDeviceUsageManagerImpl] (ExternalNetworkMonitor-1:null) Exception:
javax.persistence.EntityExistsException: Entity already exists:
Caused by: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '4-1-172.22.6.217-5-ExternalLoadBalancer' for key 'account_id'
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
2013-05-02 09:48:22,730 DEBUG [storage.snapshot.SnapshotSchedulerImpl] (SnapshotPollTask:null) Snapshot scheduler.poll is being called at 2013-05-02 04:18:22 GMT

At the same time when I see pools of F% LB, I can see below

Service state : Unknown (Enabled) - The children pool member(s) either don't have service checking enabled, or service check results are not available yet

Please advice

Anoop