Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

automatic configure juniper srx nat loopback #2183

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
ming416 wants to merge 1 commit into from
Closed

automatic configure juniper srx nat loopback #2183

ming416 wants to merge 1 commit into from

Conversation

@ming416
Copy link
Contributor

@ming416 ming416 commented Jul 14, 2017 •
edited
Loading

automatic configure juniper srx/vsrx nat loopback,

constraint condition that manual configure source nat in juniper srx，allowed vm vist public network :
zone : trust to {trust,untrust}
rule : source address {0.0.0.0/0},destination address{0.0.0.0/0} ,do source nat with pool {public network getway ip}.

code change for trust to trust destination or static nat:

  1. add srxCommand :CHECK_PRIVATE_IF_EXISTS. for add/delete rule to detect whether exist or not contain DestinationNatRule or StaticNatRule (ruleName_private) in trust zone .
  2. add DestinationNatRule (ruleName_private) to trust zone when ADD DestinationNatRule to untrust .
  3. delete DestinationNatRule (ruleName_private) from trust zone when DELETE DestinationNatRule from untrust.
  4. add StaticNatRule (ruleName_private) to trust zone when ADD StaticNatRule to untrust .
  5. delete StaticNatRule (ruleName_private) from trust zone when DELETE StaticNatRule from untrust.

@ming416
auto configure juniper srx nat loopback
15f7742 
auto configure juniper srx/vsrx nat loopback,

constraint condition that manual configure source nat in juniper srx，allowed vm vist public network :
zone : trust to {trust,untrust}
rule : source address {0.0.0.0/0},destination address{0.0.0.0/0} ,do source nat with pool {public network getway ip}.

code change for trust to trust destination nat:

1. add srxCommand :CHECK_PRIVATE_IF_EXISTS. for add/delete rule to detect whether exist or not contain DestinationNatRule (ruleName_private) in trust zone .
2. add DestinationNatRule (ruleName_private) to trust zone when ADD DestinationNatRule to untrust .
3. delete DestinationNatRule (ruleName_private) from trust zone when DELETE DestinationNatRule from untrust.
@ming416 ming416 closed this Jul 14, 2017
@cloudmonger
Copy link

cloudmonger commented Jul 16, 2017

ACS CI BVT Run

Sumarry:
Build Number 971
Hypervisor xenserver
NetworkType Advanced
Passed=103
Failed=10
Skipped=12

Link to logs Folder (search by build_no): https://www.dropbox.com/sh/r2si930m8xxzavs/AAAzNrnoF1fC3auFrvsKo_8-a?dl=0

Failed tests:

  • test_scale_vm.py

  • ContextSuite context=TestScaleVm>:setup Failing since 27 runs

  • test_non_contigiousvlan.py

  • test_extendPhysicalNetworkVlan Failed

  • test_deploy_vm_iso.py

  • test_deploy_vm_from_iso Failing since 29 runs

  • test_volumes.py

  • test_06_download_detached_volume Failed

  • test_vm_life_cycle.py

  • test_10_attachAndDetach_iso Failing since 29 runs

  • test_routers_network_ops.py

  • test_01_isolate_network_FW_PF_default_routes_egress_true Failing since 62 runs

  • test_02_isolate_network_FW_PF_default_routes_egress_false Failing since 62 runs

  • test_01_RVR_Network_FW_PF_SSH_default_routes_egress_true Failing since 61 runs

  • test_02_RVR_Network_FW_PF_SSH_default_routes_egress_false Failing since 61 runs

  • test_03_RVR_Network_check_router_state Failed

Skipped tests:
test_vm_nic_adapter_vmxnet3
test_01_verify_libvirt
test_02_verify_libvirt_after_restart
test_03_verify_libvirt_attach_disk
test_04_verify_guest_lspci
test_05_change_vm_ostype_restart
test_06_verify_guest_lspci_again
test_static_role_account_acls
test_11_ss_nfs_version_on_ssvm
test_nested_virtualization_vmware
test_3d_gpu_support
test_deploy_vgpu_enabled_vm

Passed test suits:
test_deploy_vm_with_userdata.py
test_affinity_groups_projects.py
test_portable_publicip.py
test_vm_snapshots.py
test_over_provisioning.py
test_global_settings.py
test_service_offerings.py
test_routers_iptables_default_policy.py
test_loadbalance.py
test_routers.py
test_reset_vm_on_reboot.py
test_deploy_vms_with_varied_deploymentplanners.py
test_network.py
test_router_dns.py
test_login.py
test_list_ids_parameter.py
test_public_ip_range.py
test_multipleips_per_nic.py
test_metrics_api.py
test_regions.py
test_affinity_groups.py
test_network_acl.py
test_pvlan.py
test_nic.py
test_deploy_vm_root_resize.py
test_resource_detail.py
test_secondary_storage.py
test_disk_offerings.py

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ming416 @cloudmonger
Morty Proxy This is a proxified and sanitized view of the page, visit original site.