"nova secgroup-add-rule default icmp..." doesn't work immediately for the instance ?

asked 2015-09-01 22:32:43 -0500

suntao gravatar image

I have a OpenStack kilo setup with a controller and a compute node(network-compute + network-network).

After i created an VM instance and got IP from dnsmasq, i want to ping the instance from the br100(, i get the error message “ping: sendmsg: Operation not permitted”.

for example: 1)instance ping br100: OK 2)br100 ping instance: “ping: sendmsg: Operation not permitted”

Then I configured “nova secgroup-add-rule default icmp -1 -1”, but still I not able to ping the Vm instance.

I am confused with this problem a few days. Thanks !

edit retag flag offensive close merge delete