VMware Cloud Community
KevinFahey
Contributor
Contributor

Traffic Filtering not working as expected

Hi,

Just wondering if someone can see something wrong with this:

vm with a public ip herein known is ip1

vm is in a portgroup with traffic filtering enabled

created the following rules in this order:

ingress allow any

egress allow ip1

egress drop any

I can not communicate with this vm from an outside machine.

If i remove the last rule, i can communicate fine.

Am I missing something?

Thank You

Reply
0 Kudos
2 Replies
KevinFahey
Contributor
Contributor

Sorry forgot to mention on second rule that is egress allow source ip1 destination any

Reply
0 Kudos
KevinFahey
Contributor
Contributor

Ok I figured out a way that works.

cleared all the rules, set my first rule as egress allow, src ip1 dest any

set last rule as egress drop src ip1net/24 dest any

So basically drop the entire subnet as the last rule.  And this is working fine now.

Reply
0 Kudos