Ask Your Question

Ocata Packstack-Multi Node Config Can't Access VM Instance

asked 2017-07-06 19:12:00 -0500

FeedyRhys gravatar image

updated 2017-07-07 12:57:49 -0500

Created a VM instance - This was successful. Assigned a floating IP also. Can see the console of the instantiated VM.

I cannot seem to hit the VM from my laptop, or on nodes other than the network node. Not sure what to do next in terms of troubleshooting. I can ssh and ping from the network node, but not compute, or control.

IP Spaces -

10.21.200.x - Control, Network, Compute Node locations

ens192 - network nic that connects to physical connection this is assigned for example for control .5 for network .6 for compute

ens224 - internal network nic

192.168.11.x - Private network subnet - That I created in neutron

The following is the config from packstack answer file:


Attached is image of network topology:

ALso when configuring the public and private networks -

neutron net-create public --provider:network_type flat --provider:physical_network extnet --router:external

neutron subnet-create --gateway --allocation-pool start=,end= --disable-dhcp --name public_subnet public

neutron  subnet-create private --name private_subnet  --enable-dhcp=True --dns-nameserver --dns-nameserver

Control - route

    Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         gateway         UG    0      0        0 ens192   U     0      0        0 ens192
link-local     U     1002   0        0 ens192
link-local     U     1003   0        0 ens224   U     0      0        0 ens224

Network -route

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         gateway         UG    0      0        0 br-ex   U     0      0        0 br-ex
link-local     U     1002   0        0 ens192
link-local     U     1003   0        0 ens224
link-local     U     1007   0        0 br-ex   U     0      0        0 ens224


.48 is the router .45 is the VM

ip netns

ip netns exec qrouter-1dbfae15-98b7-4c9c-9a7a-b99116d6562e ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
11: qg-204e3bf4-8d: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN qlen 1000
    link/ether fa:16:3e:84:3e:6e brd ff ...
edit retag flag offensive close merge delete


You configured the external subnet with 10.21.200/24. On the nodes, you have netmasks Doesn't seem to fit.

Bernd Bausch gravatar imageBernd Bausch ( 2017-07-06 22:55:28 -0500 )edit

Other steps: Check if instance received IP address. Can you reach its private address from the router and DHCP netns. Can you ping from the instance outside. Trace packets in the netns and the physical interfaces.

Bernd Bausch gravatar imageBernd Bausch ( 2017-07-06 22:59:42 -0500 )edit

Hi, Bernd. Fixed netmasks but that didn't seem to fix issue. I posted results of netns for both qrouter and qdhcp.. quick q, should I also be seeing the floating IP in the qdhcp list?

FeedyRhys gravatar imageFeedyRhys ( 2017-07-07 12:37:59 -0500 )edit

1 answer

Sort by ยป oldest newest most voted

answered 2017-07-07 13:12:03 -0500

FeedyRhys gravatar image

updated 2017-07-07 13:26:45 -0500

Okay figured it out I think I left out a key point got too wrapped in details :(

If you are building your OpenStack nodes as virtual machines, you must configure the hypervisor to permit promiscuous mode on the external network"

This was done through esxi on vswitch properties -> edit -> security -> promiscuous mode. Toggled to accept.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2017-07-06 19:12:00 -0500

Seen: 233 times

Last updated: Jul 07 '17