Configuring the firewall

Configuring the firewall The hypervisor needs to be able to communicate with other hypervisors and the management server needs to be able to reach the hypervisor. In order to do so we have to open the following TCP ports (if you are using a firewall): 22 (SSH) 1798 16509 (libvirt) 5900 - 6100 (VNC consoles) 49152 - 49216 (libvirt live migration) It depends on the firewall you are using how to open these ports. Below you'll find examples how to open these ports in RHEL/CentOS and Ubuntu.

Open ports in RHEL/CentOS TODO: How to open ports

Open ports in Ubuntu The default firewall under Ubuntu is UFW (Uncomplicated FireWall), although not enabled. To open the required ports, execute the following commands: ufw allow proto tcp from any to any port 22 ufw allow proto tcp from any to any port 1798 ufw allow proto tcp from any to any port 16509 ufw allow proto tcp from any to any port 5900:6100 ufw allow proto tcp from any to any port 49152:492160 By default UFW is not enabled on Ubuntu. Executing these commands with the firewall disabled does not enable the firewall.