*Please note:* Shorewall provides a NAT Masquerade rule that allows the compute nodes to access networks that are outside the cluster via the headnode.
If you are okay with the compute nodes not having access to external networks or aren’t using the headnode as the default gateway for the compute nodes, then here is the method to disable Shorewall.
Disable the Shorewall and Shorewall6 services on the headnode with the following commands.
% device use master% services% set shorewall autostart no% set shorewall monitored no% set shorewall6 autostart no% set shorewall monitored no% commit% quit
You will also want to stop and disable Shorewall from startup at boot:#systemctl stop shorewall#systemctl stop shorewall6#systemctl disable shorewall#systemctl disable shorewall6