In this explanation, we will show how you can setup an advanced zone (without security groups) in a typical (home/private) 192.168.1.0/24 network.

To set up our CloudStack, we have to proceed to http://192.168.1.225(i.e. the cloudbr0-IP):8080/client first, then log in using the default credentials - username admin and password password.

Once we were logged in, go to Infrastructure > Zone and click on add zone button, select advanced zone and provide following configuration:

Name - <any name>
Public DNS 1 - 8.8.8.8
Public DNS 2 - 8.8.4.4
Internal DNS1 - 192.168.1.1
Hypervisor - KVM
Network offering: Offering for Shared Security group enabled networks

Once we have established the zone's details, we can continue to setting up the networks. During this step, we will setup 4 different parts of the network, the physical network, the public traffic, the pod, and the guest traffic.

In the physical network configuration, use the default settings, where VLAN is the isolation method on a single physical nic (on the host) that will carry all traffic types (management, public, guest etc).

Next, provide the following configuration for the public traffic:

Gateway - 192.168.1.1
Netmask - 255.255.255.0
Start/end reserved system IPs - 192.168.1.50 - 192.168.1.60

Then, provide the following configuration for the pod:

Name - <any name>
Reserved system gateway - 192.168.1.1
Reserved system netmask - 255.255.255.0
Start/end reserved system IPs - 192.168.1.61 - 192.168.1.70

Finally, provide the following configuration for the guest traffic:

VLAN-VNI range 700 - 900

After configuring the network, we setup the resources, starting with creating a cluster as follows:

Next, add the default/first host with the following configuration:

Hostname - 192.168.1.225
Username - root
Password - <password for root user, please enable root user ssh-access by password on the KVM host> (‘cloud’ is our group 9 password)

Now, add the primary storage with the following configuration:

Name - <any name>
Scope - Zone
Protocol - NFS
Server - 192.168.1.225
Path - /export/primary

Then, add the secondary storage with the following configuration:

Provider - NFS
Name - <any name>
Server - 192.168.1.225
Path - /export/secondary

Next, click the Launch Zone button and the Enable Zone button.

Lastly, verify that all the components is up and running.

To finish it off, we can also change a few configurations for the CloudStack network, such as adding a new network or adding a new egress rules.

Note: Change the gateway for the network to any IP address gateway different from the physical IP network used in earlier steps.

Egress rule is a rule which defines the criteria for allowing outbound packets from a network boundary into outwards. By adding an egress rule, this essentially enables the VM to send packets to the Internet.