Allow ping on a HSX Cluster

​@Rohit Ravi thanks very much. Perfect answer, copy & paste - job done.

​@atitagain  Happy to help!!!

Hello, 

The Rohit Ravi commands works, but the official documentation is reporting some errors on the commands (missing some “--” before the options):

https://documentation.commvault.com/v11/essential/enabling_firewall_on_hyperscale_x.html

# These commands are not working:

firewall-cmd zone=block add-icmp-block-inversion permanent

firewall-cmd zone=block add-icmp-block=echo-reply permanent

firewall-cmd zone=block add-icmp-block=echo-request permanent

firewall-cmd reload
 

# There Rohit Ravi commands are correct:

firewall-cmd --permanent --add-icmp-block-inversion

firewall-cmd --permanent --add-icmp-block=echo-reply

firewall-cmd --permanent --add-icmp-block=echo-request

firewall-cmd --reload

Best Regards

Lucio

Hello Lucio,

You can try the following commands and change in configuration to achieve the same results.

Commands:

# firewall-cmd --permanent --zone=block --add-icmp-block-inversion

# firewall-cmd --permanent --zone=block --add-rich-rule='rule protocol value="icmp" accept'

# firewall-cmd --reload

or you can add the following 2 lines in block.xml

===

<icmp-block-inversion/>
<protocol value="icmp"/>

===

Regards,

bronco