~Rohit2> Are those firewall rules correct or wrong ?Please help me to understand this issue.# iptables -L2> And sometime both data domain successfully got attached but after that host2 is not coming up by saying "host1 cannot access to NFS2-Data Domain and hence moving host1 to Non-Operational"(e.g. let say NFS1-Data Domain is attached to DataCenter1 then after that NFS2-Data Domain failing to attach DataCenter1)As you see in above case I am trying to attach both NFS partition to Datacente1 and I got various behaviour:|-----Cluster2 ------host2-----NFS2-Data DomainDataCenter1 ---------Cluster1 -----host1 ---- NFS1-Data DomainHi,I am trying to setup ovirt as shown below.
|
1> Once one data domain attached to data center other is failing to attached
host1 firewall rules are :
------------------------------------------------------------ ------------------------------ --------
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:54321
ACCEPT tcp -- anywhere anywhere tcp dpt:54322
ACCEPT tcp -- anywhere anywhere tcp dpt:sunrpc
ACCEPT udp -- anywhere anywhere udp dpt:sunrpc
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT udp -- anywhere anywhere udp dpt:snmp
ACCEPT tcp -- anywhere anywhere tcp dpt:websm
ACCEPT tcp -- anywhere anywhere tcp dpt:16514
ACCEPT tcp -- anywhere anywhere multiport dports rockwell-csp2
ACCEPT tcp -- anywhere anywhere multiport dports rfb:6923
ACCEPT tcp -- anywhere anywhere multiport dports 49152:49216
ACCEPT tcp -- anywhere anywhere tcp dpt:sunrpc
ACCEPT tcp -- anywhere anywhere tcp dpt:nfs
ACCEPT udp -- anywhere anywhere udp dpt:nfs
ACCEPT udp -- anywhere anywhere udp dpt:sunrpc
ACCEPT udp -- anywhere anywhere udp dpt:892
ACCEPT tcp -- anywhere anywhere tcp dpt:892
ACCEPT tcp -- anywhere anywhere tcp dpt:ospf-lite
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- anywhere anywhere PHYSDEV match ! --physdev-is-bridged reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
------------------------------------------------------------ ------------------------------ --------
1> Do ovirt support multiple-cluster to multiple-storage data domain ?3> Can host1 access storage domain created on another cluster say host2 m/c ? (NFS technology)Thanks,
_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users