Hi i have built a OpenStack cloud on RHEL 7. I have used networking option 2.

After creating the instance i'm able to ping the floating ip address of instance on controller but not on compute or on any hosts on provider network.

according to this link , in the verification section,

https://docs.openstack.org/install-guide/launch-instance-networks-selfservice.html

after running the command openstack port list --router router

output: IP ADDRESS I was able to ping ip address on controller but not on any other host on the provider network.

and

i was not able to ping any ip address on the instance, only controller ip address was able to ping.

ALLOW IPv6 to ::/0
ALLOW IPv4 from default
ALLOW IPv6 from default
ALLOW IPv4 22/tcp from 0.0.0.0/0
ALLOW IPv4 to 0.0.0.0/0
ALLOW IPv4 icmp from 0.0.0.0/0
ALLOW IPv4 80/tcp from 0.0.0.0/0
ALLOW IPv4 53/tcp from 0.0.0.0/0

above is the security group applied for instance.

[root@controller openstackusr]# . admin-openrc
[root@controller openstackusr]# neutron agent-list
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+--------------------------------------+--------------------+------------+-------------------+-------+----------------+---------------------------+
| id                                   | agent_type         | host       | availability_zone | alive | admin_state_up | binary                    |
+--------------------------------------+--------------------+------------+-------------------+-------+----------------+---------------------------+
| 80fa2650-9959-44f1-a87e-b12b5755b2b7 | L3 agent           | controller | nova              | :-)   | True           | neutron-l3-agent          |
| 9f7f4043-9d17-464c-8268-5f5b51102dc9 | Linux bridge agent | compute    |                   | :-)   | True           | neutron-linuxbridge-agent |
| a54e01e9-ecaa-4a3b-915e-8905a5450413 | Metadata agent     | controller |                   | :-)   | True           | neutron-metadata-agent    |
| a8a7dd11-2b19-4d59-8422-ea25a94c7819 | DHCP agent         | controller | nova              | :-)   | True           | neutron-dhcp-agent        |
| f29e3aaf-14b7-4bf9-bb71-e6c0f84e9e9d | Linux bridge agent | controller |                   | :-)   | True           | neutron-linuxbridge-agent |
+--------------------------------------+--------------------+------------+-------------------+-------+----------------+---------------------------+

[root@controller openstackusr]#

root@controller openstackusr]# openstack port list --router router
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------+--------+
| ID                                   | Name | MAC Address       | Fixed IP Addresses                                                         | Status |
+--------------------------------------+------+-------------------+----------------------------------------------------------------------------+--------+
| 60fbde00-287e-4898-a9ce-94931a416365 |      | fa:16:3e:b1:92:be | ip_address='172.16.1.1', subnet_id='cde52553-67ee-4f9a-b13e-abfb04eca743'  | ACTIVE |
| fd3e5cb5-d21e-42b3-93f4-ebbc21eedd73 |      | fa:16:3e:84:0d:c9 | ip_address='10.xx.xx.6', subnet_id='71ae2f89-29de-40c0-827c-bab1cd959ae0' | ACTIVE |
+------------------------

--------------+------+-------------------+----------------------------------------------------------------------------+--------+

when i ping IP 10.xx.xx.6 on controller, it pings... but not in compute or any other hosts on network provider.

tracerout 10.xx.xx.6 gives output in controller, but not on other hosts.

please help me out.

Following error is shown up in the log dashboard....of instance...

  === network info ===
    if-info: lo,up,127.0.0.1,8,,
    if-info: eth0,up,192.168.122.97,24,fe80::f816:3eff:fe88:3164/64,
    ip-route:default via 192.168.122.1 dev eth0 
    ip-route:169.254.169.254 via 192.168.122.1 dev eth0 
    ip-route:192.168.122.0/24 dev eth0  src 192.168.122.97 
    ip-route6:fe80::/64 dev eth0  metric 256 
    ip-route6:unreachable default dev lo  metric -1  error -101
    ip-route6:ff00::/8 dev eth0  metric 256 
    ip-route6:unreachable default dev lo  metric -1  error -101
    === datasource: None None ===
    === cirros: current=0.4.0 uptime=253.59 ===
  ____               ____  ____