Hi,
I’ve had a couple of VMs and dummy VNETs. Then I created a new fw VNET and attached to one of the VMs. Deleted all&all rules of default Security Group. So I expect all in&out traffic should be disallowed on the new interface of new VM (ID:19). But it wont work.
Checked the security group on cli:
[oneadmin@node01 ~]$ onesecgroup show 0
SECURITY GROUP 0 INFORMATION
ID : 0
NAME : default
USER : oneadmin
GROUP : oneadmin
PERMISSIONS
OWNER : uma
GROUP : u–
OTHER : u–
VIRTUAL MACHINES
UPDATED : 13,15,16,17,18,20,21,22,23,24
OUTDATED :
ERROR :
RULES
TYPE PROTOCOL ICMP_TYPE NETWORK RANGE
That VM is not in the list. onesecgroup commit 0 doesnt make any change.
VNET details:
[oneadmin@node01 ~]$ onevnet show 6
VIRTUAL NETWORK 6 INFORMATION
ID : 6
NAME : EBG-fw-net-192.168.6.51
USER : oneadmin
GROUP : oneadmin
CLUSTERS : 0
BRIDGE : br0
VN_MAD : fw
USED LEASES : 1
PERMISSIONS
OWNER : um-
GROUP : —
OTHER : —
VIRTUAL NETWORK TEMPLATE
BRIDGE="br0"
FILTER_IP_SPOOFING="YES"
FILTER_MAC_SPOOFING=“YES"
PHYDEV=”"
SECURITY_GROUPS=“0"
VLAN_ID=”"
VN_MAD=“fw”
ADDRESS RANGE POOL
AR 0
SIZE : 10
LEASES : 1
RANGE FIRST LAST
MAC 02:00:c0:a8:06:33 02:00:c0:a8:06:3c
IP 192.168.6.51 192.168.6.60
LEASES
AR OWNER MAC IP IP6_GLOBAL
0 V:19 02:00:c0:a8:06:33 192.168.6.51 -
Kind regards,
Orhan