7:09 p.m.
Hi,
I am trying to setup ovirt as shown below.
DataCenter1 ---------Cluster1 -----host1 ---- NFS1-Data Domain
|
|-----Cluster2 ------host2-----NFS2-Data Domain
As you see in above case I am trying to attach both NFS partition to
Datacente1 and I got various behaviour:
1> Once one data domain attached to data center other is failing to
attached
(e.g. let say NFS1-Data Domain is attached to DataCenter1 then after that
NFS2-Data Domain failing to attach DataCenter1)
2> And sometime both data domain successfully got attached but after that
host2 is not coming up by saying "host1 cannot access to NFS2-Data Domain
and hence moving host1 to Non-Operational"
host1 firewall rules are :
--------------------------------------------------------------------------------------------------
# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
ACCEPT icmp -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:54321
ACCEPT tcp -- anywhere anywhere tcp dpt:54322
ACCEPT tcp -- anywhere anywhere tcp dpt:sunrpc
ACCEPT udp -- anywhere anywhere udp dpt:sunrpc
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT udp -- anywhere anywhere udp dpt:snmp
ACCEPT tcp -- anywhere anywhere tcp dpt:websm
ACCEPT tcp -- anywhere anywhere tcp dpt:16514
ACCEPT tcp -- anywhere anywhere multiport
dports rockwell-csp2
ACCEPT tcp -- anywhere anywhere multiport
dports rfb:6923
ACCEPT tcp -- anywhere anywhere multiport
dports 49152:49216
ACCEPT tcp -- anywhere anywhere tcp dpt:sunrpc
ACCEPT tcp -- anywhere anywhere tcp dpt:nfs
ACCEPT udp -- anywhere anywhere udp dpt:nfs
ACCEPT udp -- anywhere anywhere udp dpt:sunrpc
ACCEPT udp -- anywhere anywhere udp dpt:892
ACCEPT tcp -- anywhere anywhere tcp dpt:892
ACCEPT tcp -- anywhere anywhere tcp
dpt:ospf-lite
REJECT all -- anywhere anywhere reject-with
icmp-host-prohibited
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- anywhere anywhere PHYSDEV match
! --physdev-is-bridged reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
--------------------------------------------------------------------------------------------------
Please help me to understand this issue.
1> Do ovirt support multiple-cluster to multiple-storage data domain ?
2> Are those firewall rules correct or wrong ?
3> Can host1 access storage domain created on another cluster say host2 m/c
? (NFS technology)
Thanks,
~Rohit