Unable to ping IPs of VMs in provider network

asked 2017-03-09 16:42:41 -0500

Toki Winter gravatar image

Hello,

I've set up a single node OSA AIO using the stable/newton checkout. I have configured things as I think they should be, but I am unable to ping any of the IP addresses of VMs created in the provider network. Here are some further details:

root@osa-test:~# openstack subnet show provider1-v4
+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| allocation_pools  | 172.16.46.50-172.16.46.60            |
| cidr              | 172.16.46.0/24                       |
| created_at        | 2017-03-09T09:49:36Z                 |
| description       |                                      |
| dns_nameservers   | 172.16.46.2                          |
| enable_dhcp       | True                                 |
| gateway_ip        | 172.16.46.2                          |
| host_routes       |                                      |
| id                | 86104fd5-a86b-4b65-bae4-f821507824a6 |
| ip_version        | 4                                    |
| ipv6_address_mode | None                                 |
| ipv6_ra_mode      | None                                 |
| name              | provider1-v4                         |
| network_id        | 865b0a5f-ff55-44f3-bef4-89ae946079eb |
| project_id        | 24b30f4391d8432cb0dc4a07f2a4b114     |
| project_id        | 24b30f4391d8432cb0dc4a07f2a4b114     |
| revision_number   | 3                                    |
| service_types     | []                                   |
| subnetpool_id     | None                                 |
| updated_at        | 2017-03-09T10:23:42Z                 |
+-------------------+--------------------------------------+
root@osa-test:~# openstack network show provider1
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        | nova                                 |
| created_at                | 2017-03-09T09:48:25Z                 |
| description               |                                      |
| id                        | 865b0a5f-ff55-44f3-bef4-89ae946079eb |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| is_default                | False                                |
| mtu                       | 1500                                 |
| name                      | provider1                            |
| port_security_enabled     | True                                 |
| project_id                | 24b30f4391d8432cb0dc4a07f2a4b114     |
| project_id                | 24b30f4391d8432cb0dc4a07f2a4b114     |
| provider:network_type     | flat                                 |
| provider:physical_network | flat                                 |
| provider:segmentation_id  | None                                 |
| revision_number           | 7                                    |
| router:external           | External                             |
| shared                    | True                                 |
| status                    | ACTIVE                               |
| subnets                   | 86104fd5-a86b-4b65-bae4-f821507824a6 |
| tags                      | []                                   |
| updated_at                | 2017-03-09T10:23:42Z                 |
+---------------------------+--------------------------------------+

The security group looks good:

root@osa-test:~# openstack security group show d3e82391-a709-4473-816a-dd2b5d6d979f
+-----------------+----------------------------------------------------------------------------------+
| Field           | Value                                                                            |
+-----------------+----------------------------------------------------------------------------------+
| created_at      | 2017-03-09T08:26:10Z                                                             |
| description     | Default security group                                                           |
| id              | d3e82391-a709-4473-816a-dd2b5d6d979f                                             |
| name            | default                                                                          |
| project_id      | 24b30f4391d8432cb0dc4a07f2a4b114                                                 |
| project_id      | 24b30f4391d8432cb0dc4a07f2a4b114                                                 |
| revision_number | 3                                                                                |
| rules           | created_at='2017-03-09T08:26:10Z', direction='egress', ethertype='IPv4',         |
|                 | id='14668c04-f281-4f4c-a555-3699f27f286f',                                       |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114', revision_number='1',              |
|                 | updated_at='2017-03-09T08:26:10Z'                                                |
|                 | created_at='2017-03-09T08:51:24Z', direction='ingress', ethertype='IPv4', id     |
|                 | ='7065041e-58e6-4d3b-ad2f-e95675f8d733', port_range_max='22',                    |
|                 | port_range_min='22', project_id='24b30f4391d8432cb0dc4a07f2a4b114',              |
|                 | protocol='tcp', remote_ip_prefix='0.0.0.0/0', revision_number='1',               |
|                 | updated_at='2017-03-09T08:51:24Z'                                                |
|                 | created_at='2017-03-09T08:51:10Z', direction='ingress', ethertype='IPv4', id     |
|                 | ='78653ecd-89c4-4c80-a75a-3158d2d0b71e',                                         |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114', protocol='icmp',                  |
|                 | remote_ip_prefix='0.0.0.0/0', revision_number='1',                               |
|                 | updated_at='2017-03-09T08:51:10Z'                                                |
|                 | created_at='2017-03-09T08:26:10Z', direction='egress', ethertype='IPv6',         |
|                 | id='c152c5f1-7777-4048-8858-f4b75f43028a',                                       |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114', revision_number='1',              |
|                 | updated_at='2017-03-09T08:26:10Z'                                                |
|                 | created_at='2017-03-09T08:26:10Z', direction='ingress', ethertype='IPv4',        |
|                 | id='d31918c6-4822-4931-8054-5596072734f0',                                       |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114',                                   |
|                 | remote_group_id='d3e82391-a709-4473-816a-dd2b5d6d979f', revision_number='1',     |
|                 | updated_at='2017-03-09T08:26:10Z'                                                |
|                 | created_at='2017-03-09T08:26:10Z', direction='ingress', ethertype='IPv6',        |
|                 | id='f7b4fcb2-227f-44f8-b141-3e0b5a907a9e',                                       |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114',                                   |
|                 | remote_group_id='d3e82391-a709-4473-816a-dd2b5d6d979f', revision_number='1',     |
|                 | updated_at='2017-03-09T08:26:10Z'                                                |
| updated_at      | 2017-03-09T08:51:24Z                                                             |
+-----------------+----------------------------------------------------------------------------------+

Instance details:

root@osa-test:~# openstack server show provider-instance1
+--------------------------------------+----------------------------------------------------------+
| Field                                | Value                                                    |
+--------------------------------------+----------------------------------------------------------+
| OS-DCF:diskConfig                    | MANUAL                                                   |
| OS-EXT-AZ:availability_zone          | nova                                                     |
| OS-EXT-SRV-ATTR:host                 | osa-test                                                 |
| OS-EXT-SRV-ATTR:hypervisor_hostname  | osa-test                                                 |
| OS-EXT-SRV-ATTR:instance_name        | instance-00000004                                        |
| OS-EXT-STS:power_state               | Running                                                  |
| OS-EXT-STS:task_state                | None                                                     |
| OS-EXT-STS:vm_state                  | active                                                   |
| OS-SRV-USG:launched_at               | 2017-03-09T10:13:15.000000                               |
| OS-SRV-USG:terminated_at             | None                                                     |
| accessIPv4                           |                                                          |
| accessIPv6                           |                                                          |
| addresses                            | provider1=172.16.46.54                                   |
| config_drive                         |                                                          |
| created                              | 2017-03-09T10:13:00Z                                     |
| flavor                               | m1.tiny (dfac6d15-03d9-40e0-a53a-510569d293b0)           |
| hostId                               | afb48985d625af1e63cf0b06acc12b27bdc511c2a7dcc29f00eb3e67 |
| id                                   | cd2d237c-708c-4215-9917-5fd12d031892                     |
| image                                | cirros (1a72d2a7-1b2f-4bba-8d5a-67cde08f78de)            |
| key_name                             | None                                                     |
| name                                 | provider-instance1                                       |
| os-extended-volumes:volumes_attached | []                                                       |
| progress                             | 0                                                        |
| project_id                           | 24b30f4391d8432cb0dc4a07f2a4b114                         |
| properties                           |                                                          |
| security_groups                      | [{u'name': u'default'}]                                  |
| status                               | ACTIVE                                                   |
| updated                              | 2017-03-09T10:25:29Z                                     |
| user_id                              | 07407d46af2e459091301a2c6f0d247e                         |
+--------------------------------------+----------------------------------------------------------+

It's also worth noting that I have configured VMware to permit promiscuous mode traffic on the interface.

Masquerading is in place on the bridged interface:

root@osa-test:~# iptables -t nat -L -n -v | grep 'MASQ.*eth0'
    0     0 MASQUERADE  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0

From the instance itself, I can see that an IP address has been obtained ... (more)

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2017-03-13 12:54:36 -0500

nuriel77 gravatar image

Its hard to immediately pinpoint why it doesn't work.

Nevertheless, have a look at the flat_networks value in /etc/neutron/plugins/ml2/ml2_conf.ini, /etc/neutron/plugin.ini.

In addition check bridge_mappings in /etc/neutron/plugins/ml2/openvswitch_agent.ini, network_vlan_ranges in /etc/neutron/plugins/ml2/ml2_conf.ini, and network_vlan_ranges /etc/neutron/plugin.ini, all should use the same name (in your case I see you are using "flat", default is normally "datacentre").

Maybe we can take it from there...

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2017-03-09 16:42:41 -0500

Seen: 260 times

Last updated: Mar 13 '17