Ask Your Question
0

Cannot ping from an instance to external network, nor external interface of the router

asked 2018-03-13 10:45:27 -0500

cuongpham gravatar image

Hello all,

I have installed Openstack-Opendaylight integration, with one Openstack controller node, one Openstack networking-compute node, and one Opendaylight controller node.

I have created a topology with:

  • An external network (192.168.40.0/24)
  • A private network (10.20.1.0/24)
  • A router connecting these two, with default gw to the external network
  • Three instances (from cirros image) connecting to the private network

Please refer to the images for have a better idea about the topology. (https://i.imgur.com/abwmhrc.png, and https://i.imgur.com/pSuwvnU.png).

Everything is up normally. I can actually ping or ssh from one machine in external network (192.168.40.0/24) to an instance using its floating IP. However, from the instance I cannot ping or ssh to the external network. The instance couldn't even ping the external interface on the router.

Below are some information in the system.

Network configuration on the networking-compute node.

root@compute1:/home/tsp# ifconfig
eth0      Link encap:Ethernet  HWaddr b8:2a:72:e1:12:e6  
          inet addr:157.159.68.xx  Bcast:157.159.68.255  Mask:255.255.255.0
          inet6 addr: fe80::ba2a:72ff:fee1:12e6/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:44054 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3330 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:6137839 (6.1 MB)  TX bytes:428835 (428.8 KB)
          Interrupt:53 

eth1      Link encap:Ethernet  HWaddr b8:2a:72:e1:12:e7  
          inet addr:192.168.40.31  Bcast:192.168.40.255  Mask:255.255.255.0
          inet6 addr: fe80::ba2a:72ff:fee1:12e7/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:68677 errors:0 dropped:30 overruns:0 frame:0
          TX packets:91633 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:15612102 (15.6 MB)  TX bytes:73601177 (73.6 MB)
          Interrupt:55 

eth2      Link encap:Ethernet  HWaddr b8:2a:72:e1:12:e8  
          inet addr:10.20.30.31  Bcast:10.20.30.255  Mask:255.255.255.0
          inet6 addr: fe80::ba2a:72ff:fee1:12e8/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2478 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:158592 (158.5 KB)  TX bytes:680 (680.0 B)
          Interrupt:56 

eth3      Link encap:Ethernet  HWaddr b8:2a:72:e1:12:e9  
          inet6 addr: fe80::ba2a:72ff:fee1:12e9/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:3818 errors:0 dropped:0 overruns:0 frame:0
          TX packets:413 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:328022 (328.0 KB)  TX bytes:50024 (50.0 KB)
          Interrupt:57 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255 ...
(more)
edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted
0

answered 2018-03-16 03:42:16 -0500

cuongpham gravatar image

I have added the rules to permit SSH and ICMP. The problem actually comes from Opendaylight controller. I was using Openstack Ocata and Opendaylight Carbon 0.6.3, and somehow this integration was incompatible. I changed to Opendaylight Boron 0.5.2, and it works.

edit flag offensive delete link more
0

answered 2018-03-15 15:42:48 -0500

rlpple gravatar image

What is your instance Security Rules?

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2018-03-13 10:45:27 -0500

Seen: 100 times

Last updated: Mar 15 '18