Ask Your Question
0

Unable to ping IPs of VMs in provider network

asked 2017-03-09 16:42:41 -0500

Toki Winter gravatar image

Hello,

I've set up a single node OSA AIO using the stable/newton checkout. I have configured things as I think they should be, but I am unable to ping any of the IP addresses of VMs created in the provider network. Here are some further details:

root@osa-test:~# openstack subnet show provider1-v4
+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| allocation_pools  | 172.16.46.50-172.16.46.60            |
| cidr              | 172.16.46.0/24                       |
| created_at        | 2017-03-09T09:49:36Z                 |
| description       |                                      |
| dns_nameservers   | 172.16.46.2                          |
| enable_dhcp       | True                                 |
| gateway_ip        | 172.16.46.2                          |
| host_routes       |                                      |
| id                | 86104fd5-a86b-4b65-bae4-f821507824a6 |
| ip_version        | 4                                    |
| ipv6_address_mode | None                                 |
| ipv6_ra_mode      | None                                 |
| name              | provider1-v4                         |
| network_id        | 865b0a5f-ff55-44f3-bef4-89ae946079eb |
| project_id        | 24b30f4391d8432cb0dc4a07f2a4b114     |
| project_id        | 24b30f4391d8432cb0dc4a07f2a4b114     |
| revision_number   | 3                                    |
| service_types     | []                                   |
| subnetpool_id     | None                                 |
| updated_at        | 2017-03-09T10:23:42Z                 |
+-------------------+--------------------------------------+
root@osa-test:~# openstack network show provider1
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        | nova                                 |
| created_at                | 2017-03-09T09:48:25Z                 |
| description               |                                      |
| id                        | 865b0a5f-ff55-44f3-bef4-89ae946079eb |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| is_default                | False                                |
| mtu                       | 1500                                 |
| name                      | provider1                            |
| port_security_enabled     | True                                 |
| project_id                | 24b30f4391d8432cb0dc4a07f2a4b114     |
| project_id                | 24b30f4391d8432cb0dc4a07f2a4b114     |
| provider:network_type     | flat                                 |
| provider:physical_network | flat                                 |
| provider:segmentation_id  | None                                 |
| revision_number           | 7                                    |
| router:external           | External                             |
| shared                    | True                                 |
| status                    | ACTIVE                               |
| subnets                   | 86104fd5-a86b-4b65-bae4-f821507824a6 |
| tags                      | []                                   |
| updated_at                | 2017-03-09T10:23:42Z                 |
+---------------------------+--------------------------------------+

The security group looks good:

root@osa-test:~# openstack security group show d3e82391-a709-4473-816a-dd2b5d6d979f
+-----------------+----------------------------------------------------------------------------------+
| Field           | Value                                                                            |
+-----------------+----------------------------------------------------------------------------------+
| created_at      | 2017-03-09T08:26:10Z                                                             |
| description     | Default security group                                                           |
| id              | d3e82391-a709-4473-816a-dd2b5d6d979f                                             |
| name            | default                                                                          |
| project_id      | 24b30f4391d8432cb0dc4a07f2a4b114                                                 |
| project_id      | 24b30f4391d8432cb0dc4a07f2a4b114                                                 |
| revision_number | 3                                                                                |
| rules           | created_at='2017-03-09T08:26:10Z', direction='egress', ethertype='IPv4',         |
|                 | id='14668c04-f281-4f4c-a555-3699f27f286f',                                       |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114', revision_number='1',              |
|                 | updated_at='2017-03-09T08:26:10Z'                                                |
|                 | created_at='2017-03-09T08:51:24Z', direction='ingress', ethertype='IPv4', id     |
|                 | ='7065041e-58e6-4d3b-ad2f-e95675f8d733', port_range_max='22',                    |
|                 | port_range_min='22', project_id='24b30f4391d8432cb0dc4a07f2a4b114',              |
|                 | protocol='tcp', remote_ip_prefix='0.0.0.0/0', revision_number='1',               |
|                 | updated_at='2017-03-09T08:51:24Z'                                                |
|                 | created_at='2017-03-09T08:51:10Z', direction='ingress', ethertype='IPv4', id     |
|                 | ='78653ecd-89c4-4c80-a75a-3158d2d0b71e',                                         |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114', protocol='icmp',                  |
|                 | remote_ip_prefix='0.0.0.0/0', revision_number='1',                               |
|                 | updated_at='2017-03-09T08:51:10Z'                                                |
|                 | created_at='2017-03-09T08:26:10Z', direction='egress', ethertype='IPv6',         |
|                 | id='c152c5f1-7777-4048-8858-f4b75f43028a',                                       |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114', revision_number='1',              |
|                 | updated_at='2017-03-09T08:26:10Z'                                                |
|                 | created_at='2017-03-09T08:26:10Z', direction='ingress', ethertype='IPv4',        |
|                 | id='d31918c6-4822-4931-8054-5596072734f0',                                       |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114',                                   |
|                 | remote_group_id='d3e82391-a709-4473-816a-dd2b5d6d979f', revision_number='1',     |
|                 | updated_at='2017-03-09T08:26:10Z'                                                |
|                 | created_at='2017-03-09T08:26:10Z', direction='ingress', ethertype='IPv6',        |
|                 | id='f7b4fcb2-227f-44f8-b141-3e0b5a907a9e',                                       |
|                 | project_id='24b30f4391d8432cb0dc4a07f2a4b114',                                   |
|                 | remote_group_id='d3e82391-a709-4473-816a-dd2b5d6d979f', revision_number='1',     |
|                 | updated_at='2017-03-09T08:26:10Z'                                                |
| updated_at      | 2017-03-09T08:51:24Z                                                             |
+-----------------+----------------------------------------------------------------------------------+

Instance details:

root@osa-test:~# openstack server show provider-instance1
+--------------------------------------+----------------------------------------------------------+
| Field                                | Value                                                    |
+--------------------------------------+----------------------------------------------------------+
| OS-DCF:diskConfig                    | MANUAL                                                   |
| OS-EXT-AZ:availability_zone          | nova                                                     |
| OS-EXT-SRV-ATTR:host                 | osa-test                                                 |
| OS-EXT-SRV-ATTR:hypervisor_hostname  | osa-test                                                 |
| OS-EXT-SRV-ATTR:instance_name        | instance-00000004                                        |
| OS-EXT-STS:power_state               | Running                                                  |
| OS-EXT-STS:task_state                | None                                                     |
| OS-EXT-STS:vm_state                  | active                                                   |
| OS-SRV-USG:launched_at               | 2017-03-09T10:13:15.000000                               |
| OS-SRV-USG:terminated_at             | None                                                     |
| accessIPv4                           |                                                          |
| accessIPv6                           |                                                          |
| addresses                            | provider1=172.16.46.54                                   |
| config_drive                         |                                                          |
| created                              | 2017-03-09T10:13:00Z                                     |
| flavor                               | m1.tiny (dfac6d15-03d9-40e0-a53a-510569d293b0)           |
| hostId                               | afb48985d625af1e63cf0b06acc12b27bdc511c2a7dcc29f00eb3e67 |
| id                                   | cd2d237c-708c-4215-9917-5fd12d031892                     |
| image                                | cirros (1a72d2a7-1b2f-4bba-8d5a-67cde08f78de)            |
| key_name                             | None                                                     |
| name                                 | provider-instance1                                       |
| os-extended-volumes:volumes_attached | []                                                       |
| progress                             | 0                                                        |
| project_id                           | 24b30f4391d8432cb0dc4a07f2a4b114                         |
| properties                           |                                                          |
| security_groups                      | [{u'name': u'default'}]                                  |
| status                               | ACTIVE                                                   |
| updated                              | 2017-03-09T10:25:29Z                                     |
| user_id                              | 07407d46af2e459091301a2c6f0d247e                         |
+--------------------------------------+----------------------------------------------------------+

It's also worth noting that I have configured VMware to permit promiscuous mode traffic on the interface.

Masquerading is in place on the bridged interface:

root@osa-test:~# iptables -t nat -L -n -v | grep 'MASQ.*eth0'
    0     0 MASQUERADE  all  --  *      eth0    0.0.0.0/0            0.0.0.0/0

From the instance itself, I can see that an IP address has been obtained ... (more)

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2017-03-13 12:54:36 -0500

nuriel77 gravatar image

Its hard to immediately pinpoint why it doesn't work.

Nevertheless, have a look at the flat_networks value in /etc/neutron/plugins/ml2/ml2_conf.ini, /etc/neutron/plugin.ini.

In addition check bridge_mappings in /etc/neutron/plugins/ml2/openvswitch_agent.ini, network_vlan_ranges in /etc/neutron/plugins/ml2/ml2_conf.ini, and network_vlan_ranges /etc/neutron/plugin.ini, all should use the same name (in your case I see you are using "flat", default is normally "datacentre").

Maybe we can take it from there...

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2017-03-09 16:42:41 -0500

Seen: 192 times

Last updated: Mar 13 '17