Firewall

1. Dashboard vnc console 的 6080/tcp 必須開啟。

   [root@controller ~]# firewall-cmd --permanent --add-port=6080/tcp
   success
   [root@controller ~]# firewall-cmd --permanent --add-port=5900/tcp
   success
   [root@controller ~]# firewall-cmd --reload 
   success
   

2. Dashboard 開啟 instance console 進行 SSH 連線，所以必須確認防火牆有開啟 ssh 服務。

   [root@controller ~]# firewall-cmd --add-service=ssh
   success
   [root@controller ~]# firewall-cmd --add-service=ssh --permanent 
   success
   

3. 查詢目前的 firewall。

   [root@controller ~]# firewall-cmd --list-all
   public (active)
     target: default
     icmp-block-inversion: no
     interfaces: em2
     sources: 
     services: dhcpv6-client https http ssh
     ports: 6080/tcp 5900/tcp
     protocols: 
     masquerade: no
     forward-ports: 
     source-ports: 
     icmp-blocks: 
     rich rules: