<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Usually you need a NAT rule from your host to the OAM IP.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
For example a nat rule like this:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
host:1022 -> OAM-IP:22</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
>From outside: ssh -p 1022 sysadmin@host</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Andy<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Rai, Ankush <Ankush.Rai@commscope.com><br>
<b>Sent:</b> Tuesday, March 30, 2021 11:27 PM<br>
<b>To:</b> starlingx-discuss@lists.starlingx.io <starlingx-discuss@lists.starlingx.io><br>
<b>Cc:</b> Dharwadkar, Sriram <Sriram.Dharwadkar@commscope.com>; Sambandan, Devaraj <Devaraj.Sambandan@commscope.com><br>
<b>Subject:</b> [Starlingx-discuss] How to access Virtualized central cloud from outside the Host</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:Wingdings}
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
p.x_MsoListParagraph, li.x_MsoListParagraph, div.x_MsoListParagraph
{margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
span.x_EmailStyle17
{font-family:"Calibri",sans-serif;
color:windowtext}
.x_MsoChpDefault
{font-family:"Calibri",sans-serif}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
ol
{margin-bottom:0in}
ul
{margin-bottom:0in}
-->
</style>
<div lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<p></p>
<div style="border:solid #9C6500 1.0pt; padding:2.0pt 2.0pt 2.0pt 2.0pt">
<p class="x_MsoNormal" style="line-height:12.0pt; background:#FFEB9C"><b><span style="font-size:10.0pt; color:#9C6500"></span></b><span style="font-size:10.0pt; color:red">[Please note: This e-mail is from an EXTERNAL e-mail address]</span></p>
</div>
<div>
<div class="x_WordSection1">
<p class="x_MsoNormal">Hi,</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">I have installed the central cloud (All in one Duplex) in a virtualized environment. But not sure what NAT rules are required, to access it from outside the Host machine.</p>
<ul type="disc" style="margin-top:0in">
<li class="x_MsoListParagraph" style="margin-left:0in">Below is my deployment.</li></ul>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"><img width="469" height="331" id="x__x0000_i1029" alt="Diagram
Description automatically generated" style="width:4.8854in; height:3.4479in" data-outlook-trace="F:1|T:1" src="cid:image001.jpg@01D7260B.D7114D10"></p>
<p class="x_MsoNormal"> </p>
<ul type="disc" style="margin-top:0in">
<li class="x_MsoListParagraph" style="margin-left:0in">Starlingx is installed.</li></ul>
<p class="x_MsoNormal"> </p>
<table class="x_MsoTableGrid" border="1" cellspacing="0" cellpadding="0" style="margin-left:37.1pt; border-collapse:collapse; border:none">
<tbody>
<tr>
<td width="623" valign="top" style="width:467.5pt; border:solid windowtext 1.0pt; background:#D9D9D9; padding:0in 5.4pt 0in 5.4pt">
<p class="x_MsoNormal">system host-list</p>
<p class="x_MsoNormal"><span style="color:black">+----+--------------+-------------+----------------+-------------+--------------+</span></p>
<p class="x_MsoNormal"><span style="color:black">| id | hostname | personality | administrative | operational | availability |</span></p>
<p class="x_MsoNormal"><span style="color:black">+----+--------------+-------------+----------------+-------------+--------------+</span></p>
<p class="x_MsoNormal"><span style="color:black">| 1 | controller-0 | controller | unlocked | enabled | available |</span></p>
<p class="x_MsoNormal"><span style="color:black">| 2 | controller-1 | controller | unlocked | enabled | available |</span></p>
<p class="x_MsoNormal"><span style="color:black">+----+--------------+-------------+----------------+-------------+--------------+</span></p>
<p class="x_MsoNormal"> </p>
</td>
</tr>
</tbody>
</table>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"> </p>
<ul type="disc" style="margin-top:0in">
<li class="x_MsoListParagraph" style="margin-left:0in">Packets are reaching to the Host machine</li></ul>
<table class="x_MsoTableGrid" border="1" cellspacing="0" cellpadding="0" style="margin-left:.5in; border-collapse:collapse; border:none">
<tbody>
<tr>
<td width="1049" valign="top" style="width:787.1pt; border:solid windowtext 1.0pt; background:#D9D9D9; padding:0in 5.4pt 0in 5.4pt">
<p class="x_MsoNormal" style="margin-left:.25in">listening on ens1, link-type EN10MB (Ethernet), capture size 262144 bytes</p>
<p class="x_MsoNormal" style="margin-left:.25in"><span style="color:black">11:35:56.144807 IP 14.141.56.230.61002 > 172.31.21.86.8080: Flags [S], seq 1632511605, win 65280, options [mss 1360,nop,wscale 8,nop,nop,sackOK], length 0</span></p>
<p class="x_MsoNormal" style="margin-left:.25in"><span style="color:black">11:35:56.145030 IP 14.141.56.230.48775 > 172.31.21.86.8080: Flags [S], seq 455906092, win 65280, options [mss 1360,nop,wscale 8,nop,nop,sackOK], length 0</span></p>
<p class="x_MsoNormal" style="margin-left:.25in"><span style="color:black">11:35:56.396487 IP 14.141.56.230.57030 > 172.31.21.86.8080: Flags [S], seq 4106471277, win 65280, options [mss 1360,nop,wscale 8,nop,nop,sackOK], length 0</span></p>
<p class="x_MsoNormal" style="margin-left:.25in"><span style="color:black">11:36:00.145533 IP 14.141.56.230.61002 > 172.31.21.86.8080: Flags [S], seq 1632511605, win 65280, options [mss 1360,nop,wscale 8,nop,nop,sackOK], length 0</span></p>
</td>
</tr>
</tbody>
</table>
<p class="x_MsoListParagraph"> </p>
<ul type="disc" style="margin-top:0in">
<li class="x_MsoListParagraph" style="margin-left:0in">I have tried below rules.</li></ul>
<table class="x_MsoTableGrid" border="1" cellspacing="0" cellpadding="0" style="margin-left:.5in; border-collapse:collapse; border:none">
<tbody>
<tr>
<td width="1049" valign="top" style="width:787.1pt; border:solid windowtext 1.0pt; background:#D9D9D9; padding:0in 5.4pt 0in 5.4pt">
<p class="x_MsoListParagraph" style="margin-left:0in">iptables -t nat -I PREROUTING -i ens1 -p tcp --dport 8080 -j DNAT --to-destination 10.10.10.2:8080</p>
<p class="x_MsoListParagraph" style="margin-left:0in"><span style="color:black">iptables -A FORWARD -j ACCEPT</span></p>
<p class="x_MsoListParagraph" style="margin-left:0in"> </p>
<p class="x_MsoNormal"><span style="color:black">iptables -t nat -I POSTROUTING -s 10.10.11.0/24 -o enp125s0 -j MASQUERADE
</span></p>
<p class="x_MsoListParagraph" style="margin-left:0in"><span style="color:black">iptables -t nat -I POSTROUTING -s 10.10.10.0/24 -o ens1 -j MASQUERADE</span></p>
<p class="x_MsoListParagraph" style="margin-left:0in"> </p>
</td>
</tr>
</tbody>
</table>
<p class="x_MsoListParagraph"> </p>
<ul type="disc" style="margin-top:0in">
<li class="x_MsoListParagraph" style="margin-left:0in">Ipv4 forwarding is enabled on the host and from Host I can reach the controllers.</li></ul>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">But still could not see packet reaching to the controller. Any suggestion would be very helpful.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Thanks,</p>
<p class="x_MsoNormal">Ankush</p>
</div>
</div>
</div>
</body>
</html>