Ask Your Question

problem with neutron flat networking with gre tunneling and ovs [closed]

asked 2014-03-02 15:27:58 -0600

ssosothi gravatar image

updated 2014-03-04 00:25:53 -0600


I've been trying to setup a 2+ node flat Openstack deployment and I've been having problems getting the VM to network though neutron.

I've used the following guides:

  • (
  • (

And I've divided this question into 4 sections,

  • The problem
  • The setup
  • The diagnostics step I've tried
  • Log and Config files


When I launch a new Cirros instance from horizon, (nova show) displays the ip of However the instance cannot dhcp successfully. (nova console-log) result.


My setup currently consists of two nodes

  • The controller&network node:
  • Compute Node:

The machines are running Ubuntu 12.04.4 LTS (GNU/Linux 3.8.0-35-generic x86_64). And every package is latest as of time of this question (I ran apt-get update & upgrade).

My network segment is and my gateway is and it will perform dhcp for everything in the segment (this is something I'll like to fix later).

VNC is working correctly on horizon.

Network diagram: (network diagram)

  • The Controller is connected to the switch via eth0 and has the ovs bridge of br-eth0
  • The Compute Node is connected to the switch via eth1 and has the ovs bridge of br-eth0
  • Each node has br-int and br-tun, the ovs-vsctl show result is in the config section.


On both, nitrogen (Controller) and gold (Compute), host, upon a reboot I see the following in /var/log/neutron/openvswitch-agent.log:

2014-03-01 18:20:26.130 1024 ERROR neutron.agent.linux.ovs_lib [-] Unable to execute ['ovs-ofctl', 'add-flow', 'br-tun', 'hard_timeout=0,idle_timeout=0,priority=1,in_port=-1,actions=resubmit(,2)']. Exception: 
Command: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ovs-ofctl', 'add-flow', 'br-tun', 'hard_timeout=0,idle_timeout=0,priority=1,in_port=-1,actions=resubmit(,2)']
Exit code: 1
Stdout: ''
Stderr: 'ovs-ofctl: -1: negative values not supported for in_port\n'

I've taken a look at this question (6598) and ran sudo apt-get install openvswitch-datapath-dkms and rebooted and here's the output from the commands:

modinfo openvswitch

filename:       /lib/modules/3.8.0-35-generic/updates/dkms/openvswitch.ko
version:        1.10.2
license:        GPL
description:    Open vSwitch switching datapath
srcversion:     C57BFF12C03B30A057F0B4B
vermagic:       3.8.0-35-generic SMP mod_unload modversions

I think 1.10.2 is the correct version as I ran on the Controller:

  • (sudo ovs-vsctl show)
  • (sudo ovs-ofctl show br-tun)
  • (sudo ovs-vsctl list Interface gre-1)

I still see that ofport is -1 and am now ... (more)

edit retag flag offensive reopen merge delete

Closed for the following reason the question is answered, right answer was accepted by dheeru
close date 2014-03-04 11:35:49.117773



You have to getrid of this error. Due to this issue, there will not be any connectivity between the br-int and br-tun. I suggest the following. 1. What is the output of 'ip netns | grep dhcp' 2. Reboot your network node once. Sometimes even thought you have installed the right openvswitch version, it is not loaded properly in kernel. Try doing this. If does not work, will get into next round of troubleshooting.

dheeru gravatar imagedheeru ( 2014-03-02 23:12:46 -0600 )edit

Thank you for your instructions. The result of `ip netns | grep dhcp` is qdhcp-e3da5740-7896-4f50-829a-9fc5bc02b05c. I have rebooted the combined controller&network node but `ovs-vsctl list Interface gre-1` stills output ofport : -1 and log is still being generated.

ssosothi gravatar imagessosothi ( 2014-03-03 20:33:23 -0600 )edit

ok. Atleast DHCP is created. You must be running older version of openvswitch. Please run the following and reboot your box. apt-get install openvswitch-datapath-dkms /usr/share/openvswitch/scripts/ovs-ctl force-reload-kmod

dheeru gravatar imagedheeru ( 2014-03-03 22:40:24 -0600 )edit

Thank you for your help, I've followed your instructions and here are the outputs: If it will be more convenient for you, I can chat over freenode.

ssosothi gravatar imagessosothi ( 2014-03-04 00:24:14 -0600 )edit

I saw the output. I still see the issue with port : "gre-1" ofport : -1. I'm in IST. Shall we chat on gmail today at 9-00 PM IST ? Confirm the same.

dheeru gravatar imagedheeru ( 2014-03-04 00:56:18 -0600 )edit

1 answer

Sort by ยป oldest newest most voted

answered 2014-03-04 11:32:33 -0600

dheeru gravatar image
Had 2 hours of chat session. Here are the observation. After correcting this, port is correct and it is not able to add the flow to br-tun.

Following are not required for GRE
#network_vlan_ranges = ph-eth0:1:1
#bridge_mappings = ph-eth0:br-eth0

Following was missing
tunnel_types = gre

also local_ip was mentioned with DNS name. It was expecting real IP address.

After correcting all these, it is creating flow correctly
edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-03-02 15:27:58 -0600

Seen: 2,106 times

Last updated: Mar 04 '14