Ask Your Question
0

Cannot ping external network gateway

asked 2013-10-02 11:40:36 -0500

updated 2013-10-03 09:07:51 -0500

darragh-oreilly gravatar image

I currently have a multi node installation of openstack grizzly running with Ubuntu 12.04 LTS. Quantum use case that i have used is "Per-tenant Routers with Private Networks".

I have one Cirros with two nic, one for private tenant network and one for ext_net.

Private network works but i cannot ping ext_net gateway (my public gateway).

Does anyone know why ?

Compute Node - Route Table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.170.0.1      0.0.0.0         UG    100    0        0 eth0
10.170.0.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1

Compute Node - Network CFG

# The primary network interface
auto eth0
iface eth0 inet static
        address 10.170.0.10
        netmask 255.255.255.0
        network 10.170.0.0
        broadcast 10.170.0.255
        gateway 10.170.0.1
        # dns-* options are implemented by the resolvconf package, if installed
        dns-nameservers 10.170.0.1

auto eth1
iface eth1 inet static
        address 192.168.0.10
        netmask 255.255.255.0

Network Node - Route Table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         XX.YY.ZZ.1     0.0.0.0         UG    100    0        0 br-ex
10.170.0.0      0.0.0.0         255.255.255.0   U     0      0        0 eth0
XX.YY.ZZ.0     0.0.0.0         255.255.255.0   U     0      0        0 br-ex
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1

Network Node - Network CFG

# The primary network interface
auto eth0
iface eth0 inet static
        address 10.170.0.15
        netmask 255.255.255.0
        network 10.170.0.0
        broadcast 10.170.0.255
#       gateway 10.170.0.1
        # dns-* options are implemented by the resolvconf package, if installed
#       dns-nameservers 10.170.0.1

auto eth1
iface eth1 inet static
        address 192.168.0.15
        netmask 255.255.255.0


# The public network interface adapted for OpenStack bridge br-ex
auto eth2
iface eth2 inet manual
        up ip address add 0/0 dev $IFACE
        up ip link set $IFACE up
        down ip link set $IFACE down

# OpenStack external bridge
auto br-ex
iface br-ex inet static
        address MY-PUBLIC-IP
        netmask 255.255.255.0
        gateway MY-PUBLIC-GATEWAY
        dns-nameservers 8.8.8.8
edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2013-10-03 09:05:33 -0500

darragh-oreilly gravatar image

In the per-tenant routers with private networks use case the internal networks are connected to Quantum routers that are in turn uplinked to the external network. So when you boot your instance to the internal network it should have external access via the SNAT gateway on the router. If you need your instance to be accessible from outside, then you will need to use a floating IP. Your instance will only have one NIC for the internal network and its IP address will be NATed by the router. See here about the router.

So you should not boot directly to the external network. Ordinary tenants cannot do that anyway, so you must be using the admin credentials.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2013-10-02 11:40:36 -0500

Seen: 1,061 times

Last updated: Oct 03 '13