[Linux-cluster] Problems with RHCS across firewalls

[Christine Caulfield]

On 18/01/10 10:28, carlopmart wrote:
> Hi all,
>
> I have several problems to setup a rhcs (two nodes) when are installed
> and secured on two separated networks with a different firewalls.
>
> I have setup these rules on my internal firewalls to allow traffic for
> rhcs:
>
> source: hostA
> destination: hostB
> services: 5404 and 50405 udp, 21064 tcp, 50006-50008-50009 tcp, 50007 udp
>
> source: hostB
> destination: hostA
> services: 5404 and 50405 udp, 21064 tcp, 50006-50008-50009 tcp, 50007 udp
>
> source: hostA and hostB
> destination: 255.255.255.255
> services: 5404 and 50405 udp
>
> source: hostA and hostB
> destination: multicast_address
> service: any
>
> ... but it doesn't works ... What am I doing wrong?? I don't use NAT on
> these firewalls due to all traffic needs to across internal networks.
>
> Thanks.
>

You mention port 50405 - that should be 5405. Now that might be a typo 
in your email, but if that's the port you've opened on the servers then 
the cluster won't start.

Here's the documentation for enabling ports for cluster suite:

http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5.4/html/Cluster_Administration/s1-iptables-CA.html

Chrissie