Cannot ssh or ping instance floating ip's in openstack
I did a multinode deployment of openstack with kolla on a one control node and one compute node.
I can allocate a floating ip to an instance but I can not ssh or ping the floating ip assigned to the instance.
Here is my multinode file
# These initial groups are the only groups required to be modified. The
# additional groups are for more control of the environment.
[control]
# These hostname must be resolvable from your deployment host
openstackcontroller
# The network nodes are where your l3-agent and loadbalancers will run
# This can be the same as a host in the control group
[network]
openstackcontroller
[compute]
openstackcompute
[monitoring]
openstackcontroller
[storage]
openstackcontroller
[deployment]
localhost ansible_connection=local api_interface=enp5s0
I have add the following security groups as well:
Egress IPv6 Any Any ::/0 -
Egress IPv4 Any Any 0.0.0.0/0 -
Egress IPv4 ICMP Any 0.0.0.0/0 -
Ingress IPv4 ICMP Any 0.0.0.0/0 -
Egress IPv4 TCP 1 - 65535 0.0.0.0/0 -
Ingress IPv4 TCP 22 (SSH) 0.0.0.0/0 -
Ingress IPv4 TCP 53 (DNS) - SecurityGLV
Ingress IPv4 TCP 80 (HTTP) - SecurityGLV
Ingress IPv4 TCP 443 (HTTPS) 0.0.0.0/0 -
Ingress IPv4 UDP 1 - 65535 0.0.0.0/0 -
Egress IPv4 UDP 1 - 65535 0.0.0.0/0 -
Below is my network topology:
All nodes can ping each other but I cannot ping my vm's floating ip. I went into the console of the vm through the horizon dashboard and tried to ping the public network and the gateway but had no success. The only thing I can successfully ping from the vm instance is the router I created in openstack.
below is some info about my interfaces:
output of running command nmcli d
on Control Node:
docker0 bridge connected docker0
em1 ethernet connected em1
em2 ethernet connected em2
vxlan_sys_4789 vxlan disconnected --
output of running command nmcli d
on Compute Node:
docker0 bridge connected docker0
qbr774fbc23-58 bridge connected qbr774fbc23-58
em1 ethernet connected em1
em2 ethernet connected em2
tap774fbc23-58 tun connected tap774fbc23-58
vxlan_sys_4789 vxlan disconnected --
in my globals.yml I set em1
as my network_interface and I set em2
as my neutron_external_interface
em2
is not being used correctly. I don't think its configured correctly. and by that I mean that it has its own ip address and the documentations says it should not have an ip address. Could NOT making using of em2
(the neutron_external_interface) prevent me from being able to ssh into vm's??