External network is not reachable from subnet

asked 2017-07-14 10:10:13 -0500

Sofiane68 gravatar image

Hi,

I created a public net (10.29.14.0/24 gateway 10.29.14.1) , a private one (10.0.0.0/24) and I created a router between them.

The problem is the router gateway is set to 10.29.14.53 and I cannot associate floating IP to my instances.

My router has two interfaces : 10.29.14.53 (down) and 10.0.0.1 which is up.

When I want to assoaciate a floating IP, this is the error :

Error: External network 5635b60a-87d0-4447-a387-e75532009ae5 is not reachable from subnet 3c4b0863-afd1-4a61-ac76-4c81e881b424. Therefore, cannot associate Port 60524d40-4ce9-4400-889d-06d40baca5e1 with a Floating IP. Neutron server returns request_ids: ['req-c965fe7e-01d4-4351-80f0-b2cf57d6f7c2']


/etc/neutron/plugins/ml2/linuxbridge_agent.ini


# Ansible managed

# Linux bridge agent physical interface mappings
[linux_bridge]

#physical_interface_mappings = dbaas-mgmt:eth14

# Linux bridge agent VXLAN networks
[vxlan]

enable_vxlan = True
vxlan_group = 239.1.1.1
# VXLAN local tunnel endpoint
local_ip = 172.29.240.11
l2_population = False


# Agent
[agent]

# Security groups
[securitygroup]
firewall_driver = iptables
enable_security_group = True

/etc/neutron/plugins/ml2/ml2_conf.ini

# Ansible managed

# ML2 general
[ml2]
type_drivers = flat,vlan,vxlan,local
tenant_network_types = vxlan,flat
mechanism_drivers = linuxbridge
extension_drivers = port_security

# ML2 flat networks
[ml2_type_flat]
flat_networks = flat

# ML2 VLAN networks
[ml2_type_vlan]
network_vlan_ranges =

# ML2 VXLAN networks
[ml2_type_vxlan]
vxlan_group = 239.1.1.1
vni_ranges = 1:1000

# Security groups
[securitygroup]
enable_security_group = True
enable_ipset = True

Any ideas please?

edit retag flag offensive close merge delete

Comments

There is no route between the subnet to which the port is connected, and the network from where you obtained the floating IP. Perhaps the easiest way to check this is the network topology screen in the GUI. Otherwise, list all your networks and subnets and correlate them with the router interfaces.

Bernd Bausch gravatar imageBernd Bausch ( 2017-07-14 20:26:58 -0500 )edit

The fact that the gateway port is down is counter-intuitive but seems to be normal (i.e. that's the case in my cloud as well). I don't know if there is any method in this madness.

Bernd Bausch gravatar imageBernd Bausch ( 2017-07-14 20:28:36 -0500 )edit