Ask Your Question

i'm not able to ping or ssh my instance, it is saying no route to host avalable

asked 2019-08-23 05:44:54 -0500

noobie gravatar image

updated 2019-08-27 07:09:05 -0500

hello everyone,

this is the result of ping $ ping

Pinging with 32 bytes of data: Reply from Destination host unreachable. Reply from Destination host unreachable. Reply from Destination host unreachable.

Ping statistics for Packets: Sent = 3, Received = 3, Lost = 0 (0% loss),

this is the result of ssh $ ssh -i openstack.pem centos@ ssh: connect to host port 22: Connection timed out

these are the security groups of the instance default ALLOW IPv6 to ::/0 ALLOW IPv4 to ALLOW IPv6 from default ALLOW IPv4 from default openstack ALLOW IPv4 icmp from ALLOW IPv4 to ALLOW IPv4 22/tcp from ALLOW IPv4 icmp from openstack ALLOW IPv4 80/tcp from ALLOW IPv6 to ::/0

can anyone help me out\

http:// (image description)

edit retag flag offensive close merge delete


The problem is stated in the error message: There is no route to this address.

If your local address is, and your network prefix is 24, is in a different network, and you need a router between the two networks.

I suspect, however, that is a static IP.

Bernd Bausch gravatar imageBernd Bausch ( 2019-08-23 06:03:17 -0500 )edit

If the router you talk about is a Neutron router, it does not route traffic from outside to static IP addresses (192.168). Even if it does, you would have to set up your routing table so that this router is used.

The real solution is associating floating IPs with your static addresses.

Bernd Bausch gravatar imageBernd Bausch ( 2019-08-26 02:00:42 -0500 )edit

i tried with a floating ip also but no luck with that

noobie gravatar imagenoobie ( 2019-08-26 03:53:54 -0500 )edit

Focus on fixing instance access via floating IP. Static IP addresses are not supposed to be reachable from outside the cloud.

I can't comment on the VLAN problem without knowing error and log messages. Is VLAN configured at all? You may want to create a separate question for this problem.

Bernd Bausch gravatar imageBernd Bausch ( 2019-08-26 06:24:48 -0500 )edit

If is the address range of a tenant network, these addresses are not supposed to be reachable from outside. The concept of floating IPs exists for precisely this purpose: Reach instances from outside the cloud.

Bernd Bausch gravatar imageBernd Bausch ( 2019-08-27 01:34:26 -0500 )edit

2 answers

Sort by ยป oldest newest most voted

answered 2019-09-09 02:41:23 -0500

updated 2019-09-09 02:42:45 -0500

In order to double-check what I am saying, I just created a new Stein Packstack. The Packstack server is a KVM virtual machine, bridged to my home network It's IP is

Packstack set up as follows:

sudo packstack --debug --allinone --default-password pw        \
               --os-neutron-ovs-bridge-interfaces=br-ex:eth0   \
               --os-neutron-ml2-tenant-network-types=vxlan     \
               --os-neutron-ml2-mechanism-drivers=openvswitch  \
               --os-neutron-ml2-type-drivers=vxlan,flat        \
               --os-neutron-l2-agent=openvswitch               \
               --provision-demo-floatrange=      \
               --provision-demo-allocation-pools '["start=,end="]' \
               --os-heat-install=y --os-heat-cfn-install=y

(exactly as, except for the IP addresses).

--os-neutron-ovs-bridge-interfaces=br-ex:eth0 means that the eth0 interface is plugged into the external bridge, thereby connecting the cloud to the home network.

--provision-demo-allocation-pools sets the IP addresse ranges used for floating IPs.

The packstack command provisions two networks: External network public and a tenant network private, which belongs to the demo project.

The Packstack host's br-ex has two IP addresses. I am puzzled about; it's the same address as my home router. I removed this address from br-ex and have not seen any problems so far. is the original IP address of eth0.

6: br-ex: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000
    link/ether 52:54:00:dd:2c:f3 brd ff:ff:ff:ff:ff:ff
    inet brd scope global br-ex
       valid_lft forever preferred_lft forever
    inet scope global secondary br-ex
       valid_lft forever preferred_lft forever

With this setup, I can create an instance attached to private, give it a floating IP from the range, and can access the instance from outside. My topology:

image description

$ openstack server list -c Name -c Networks
| Name   | Networks                         |
| testvm | private=, |
$ openstack router show router1 -c external_gateway_info -c interfaces_info --fit-width
| Field                 | Value                                                          |
| external_gateway_info | {"network_id": "5ab6e727-4ca7-48df-8a4e-e59fcba1e48f",         |
|                       | "enable_snat": true, "external_fixed_ips": [{"subnet_id":      |
|                       | "68eb7a3d-9498-4e77-8c9f-26c07e35104a", "ip_address":          |
|                       | ""}]}                                             |
| interfaces_info       | [{"subnet_id": "a68c38da-22dd-48c1-bc8b-12262ed4a1c6",         |
|                       | "ip_address": "", "port_id":                           |
|                       | "d1a839e8-ce7d-4788-85b3-4875a1fc2f76"}]                       |

From a Windows PC in my network (bad round trip times, but I don't mind):

$ ping
PING ( 56 data bytes
64 bytes from icmp_seq=0 ttl=63 time=8.941 ms
64 bytes from icmp_seq=1 ttl=63 time=2.108 ms
64 bytes from icmp_seq=2 ttl=63 time=3.909 ms
--- ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/stddev = 2.108/4.986/8.941/2.892 ms

The router's gateway address,, can also be reached from a device external to the cloud.

I don't know what is different in your setup. My suspicion is that you need to configure something with VMware ... (more)

edit flag offensive delete link more


Thank you very much for the answer.

noobie gravatar imagenoobie ( 2019-09-09 06:14:50 -0500 )edit

I had found this ( Can you please tell me is it the one that causing problem?

noobie gravatar imagenoobie ( 2019-09-10 05:25:25 -0500 )edit

Thank you very much @Bernd Bausch for the answer. Because of the promiscuous mode is n rejecting i am not able to ping the vm , i had changed that by using the im able to ping and ssh the vm's now

noobie gravatar imagenoobie ( 2019-09-10 05:58:04 -0500 )edit

Actually, that was solved but i'm not able to ping the outside world from the vm now. Can u tell me how to solve that.

noobie gravatar imagenoobie ( 2019-09-10 06:02:38 -0500 )edit

What do you mean by VM - the Vmware VM that runs Packstack? If so I can't help. If you mean an OpenStack instance, it is the router that facilitates outside access via SNAT. By default, SNAT is implemented by iptables rules in the router's network namespace; you can check there.

Bernd Bausch gravatar imageBernd Bausch ( 2019-09-10 08:25:52 -0500 )edit

List the namespaces with ip netns, then enter the router's namespace sudo netns exec ROUTER-NAMESPACE /bin/bash, then check the iptables rules iptables-save, the routes ip r and the network interfaces ip a.

Bernd Bausch gravatar imageBernd Bausch ( 2019-09-10 08:29:05 -0500 )edit

Everything was created by Packstack, because I didn't use the "no demo" option. But it's easy to do it manually, see for example (start with the creation of the external network).

Bernd Bausch gravatar imageBernd Bausch ( 2019-09-13 04:10:29 -0500 )edit

Everything is working fine now. Thanks

noobie gravatar imagenoobie ( 2019-09-17 00:21:53 -0500 )edit

did you find the cause of your problem?

Bernd Bausch gravatar imageBernd Bausch ( 2019-09-17 02:06:21 -0500 )edit

i had created an internal network by using the command in rdo project, that's it its working now

noobie gravatar imagenoobie ( 2019-09-17 02:27:03 -0500 )edit


Bernd Bausch gravatar imageBernd Bausch ( 2019-09-17 06:08:10 -0500 )edit

i can create only either one 4 gb ram and 40 gb hard disk vm or 2 2gb ram 20gb hard disks vm's. eventhough 88gn disk was free can anyone tell me why its happening

noobie gravatar imagenoobie ( 2019-10-24 06:31:11 -0500 )edit

can anyone tell me why unable to ping all my vm"s all created on the same network

noobie gravatar imagenoobie ( 2019-10-25 04:46:38 -0500 )edit

Provide more information. From where do you ping them. Have they received an IP address. Do you ping floating IPs or fixed IPs. Can you ping out from the VMs. Etc.

Regarding the failed instance launches, how do you know it fails because of storage? Why not RAM or other causes?

Bernd Bausch gravatar imageBernd Bausch ( 2019-10-25 05:31:33 -0500 )edit

Pinging from the same network. the vm got an ip. and i'm truing to ping the floating ip if i delete the vm and created another vm i may or may not be able to ping that. I dont know why its happening.

noobie gravatar imagenoobie ( 2019-10-25 06:02:45 -0500 )edit

answered 2019-08-29 05:20:17 -0500

Awais Shah gravatar image

You should allow the port 22 ingress in the security group settings. Either edit the current group or add a new security group. Click on the Security groups, Manage rules, Add rule, Add All ICMP, Direction Ingress, All TCP, Direction Ingress, All UDP, Direction Ingress. Allocate floating ip to the instance, using the key you can ssh the instance. do not forget to chmod 400 key.pem before you ssh.

edit flag offensive delete link more


thanks for the answer.

noobie gravatar imagenoobie ( 2019-08-29 06:27:30 -0500 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2019-08-23 05:35:23 -0500

Seen: 1,292 times

Last updated: Sep 09 '19