The following iptables rules allow cluster suite to work: # rgmanager -A INPUT -i <cluster if> -m state --state NEW -m multiport -p tcp -s 1.1.1.0/24 -d 1.1.1.0/24 --dports 41966,41967,41968,41969 -j ACCEPT # ccsd -A INPUT -i <cluster if> -m state --state NEW -m multiport -p tcp -s 1.1.1.0/24 -d 1.1.1.0/24 --dports 50006,50008,50009 -j ACCEPT -A INPUT -i <cluster if> -m state --state NEW -m multiport -p udp -s 1.1.1.0/24 -d 1.1.1.0/24 --dports 50007 -j ACCEPT # dlm -A INPUT -i <cluster if> -m state --state NEW -m multiport -p tcp -s 1.1.1.0/24 -d 1.1.1.0/24 --dports 21064 -j ACCEPT #cman -A INPUT -i <cluster if> -m state --state NEW -p udp -s 1.1.1.0/24 -d 1.1.1.0/24 --dport 6809 -j ACCEPT Could this please be added to the cluster suite documentation.
Obviously 1.1.1.0/24 above must also be replaced with the correct cluster subnet.
Will add to currently published documentation.
Also, for conga on 4.5, you'll need to allow TCP dports 11111 (ricci) and 16851 (modclusterd).
Moving this bug to the 4.6 release since 4.5 has already been released.
Adding 'cc ecs-dev-list for tracking
Refer to draft of update here: http://homer.msp.redhat.com/~pkennedy/bug-204724/Cluster_Administration-13-rhel4.pdf This is a chapter to be added to the most current cluster administration document. Please review section 2.1, "Enabling IP Ports" for technical accuracy. Does this addition address this bug? If this looks good, I will adapt it for RHEL 5 doc, too.
I have revised the text. Here is a link to HTML output: https://engineering.redhat.com/docbot/en-US/Storage_And_Cluster/4.6.0/html/Cluster_Administration/s1-iptables-CA.html No PDF is available at this time. Please review for technical accuracy and confirm that the revised text fixes the bug. Thanks. Paul
You may want to add luci (port 8084) to the list.
Created attachment 179681 [details] New content for enabling IP ports for use with Red Hat Cluster New content created (refer to attachment) and reviewed for technical accuracy. New content is section, "Enabling IP Ports" for new chapter, "Before Configuring a Red Hat Cluster" in Cluster Administration Guide. New content will be published with currently supported RHEL 4 documentation -- RHEL 4.5 and RHEL 4.6. (Comparable content will be published with currently supported RHEL 5 documentation.)
Removing automation notification
New content is available here: http://www.redhat.com/docs/manuals/csgfs/