Ask Your Question

Openstack's profile - activity

2016-11-22 16:02:14 -0600 received badge  Famous Question (source)
2016-06-24 18:10:27 -0600 received badge  Student (source)
2016-06-24 17:15:34 -0600 received badge  Notable Question (source)
2016-06-24 17:15:34 -0600 received badge  Famous Question (source)
2016-04-17 16:30:14 -0600 received badge  Popular Question (source)
2016-04-17 16:30:14 -0600 received badge  Notable Question (source)
2016-02-17 01:45:48 -0600 received badge  Enthusiast
2016-02-12 07:46:04 -0600 commented question routing between LAN and WAN interface is not working openstack VNF instance

Thanks a lot for your info. I tried to do this change and it was not working. I will try to put some diagram with what I am trying (virtual CPE) in openstack and how my setup is there. Could you help on this ?.

2016-02-09 15:30:08 -0600 received badge  Popular Question (source)
2016-02-06 09:38:29 -0600 asked a question routing between LAN and WAN interface is not working openstack VNF instance

Hi Openstack experts,

I have installed the master branch of Openstack (devstack) all in one machine configuration in Ubuntu 14.04 LTS. I am creating VM instance (VNF) in openstack that needs to provide the firewall and NAT service to my VM/host clients and the VM will have 2 interfaces LAN and WAN. I am using the openWRT VM. The VM instance is created with LAN interface using br-mgmt interface (192.168.120.1) and WAN interface is created with net0 interface (10.10.0.1). I was able to bring the openWRT VM with LAN with IP 192.160.120.5 and WAN with IP 10.10.0.5. If I ping the WAN IP(10.10.0.5) from ubuntu Host machine, ICMP requests are reaching LAN interface in openWRT VM and ICMP reply is not generated. So ping is failed with host is unreachable. Also I tried to ping the 10.10.0.1 also from host machine and this is LAN side IP of openstack router that is pointed to openWRT VM. I was thinking that lan to wan routing is working if the reply comes for this ip(10.10.0.1) from openWRT VM. The setup I am trying is something like this

->(LAN-192.168.120.5)OpenWRT VM(WAN-10.10.0.5)->(LAN-10.10.0.1)Openstack Router(WAN-External)->(outside world)

I tried to masquerading to WAN port as well in the OpenWRT VM. the routing is not working.

Then I throught it might be due to some issue in openWRT. So I tried the install the Ubuntu VM with 2 interfaces (LAN and WAN) and tried to make this as the router by setting ip_forward flag and masquerading. When I ping the 10.10.0.5 IP from ubuntu host machine, ICMP requests are coming to LAN interface of Ubuntu VM and I am seeing ICMP reply as well generated but the host is not seeing the ICMP replies and says it as host is unreachable. If I ping 10.10.0.1 IP (openstack router LAN side IP), ICMP requests are coming to ubuntu VM Lan interface and ICMP reply is not generated.

To check this concept, I tried to use the VirtualBox and created the OpenWRT VM with LAN and WAN interfaces. I created another ubuntu VM which will point LAN interface of OpenWRT VM and routing is working perfectly.

I feel that it might be due to some concepts in openstack. I am not sure whether some IP table rules in Ubuntu Host machine are blocking or dropping the packets or openstack doesnt support the instance with 2 interfaces and routing between interfaces. Can somebody from expert group to provide suggestion on how to make it working. It will be great help.

thanks kali

2016-02-06 06:34:16 -0600 asked a question routing between lan and wan is not working in openstack instance

Hi Openstack experts,

I am from Verizon. I have installed openstack(devstack) mastar branch as all in one machine configuration in

ubuntu 14.04 LTS. I am creating the VM which needs to work as router(Firewall and NAT) and it will have 2

interfaces LAN and WAN interfaces. This router VM will provide the firewall and NAT services to my VM

client/client hosts. LAN interface was using br-mgmt adapator (192.168.120.1) and WAN interface was using net0

adaptor (10.10.0.1). I have used the openWRT VM. The VM router came up with LAN IP as 192.168.120.5 and WAN IP as

10.10.0.5. Iside the VM, there is a routing entry with 10.10.0.1 as default gateway. Because WAN is pointing the

LAN interface of openstack external router which connects the machie to outside world. Inside the VM I am able to

access the http://google.com. But I want to ping the WAN ip from ubuntu host machine. So that I can route the client

packets to my router VM. Also I added the routing entry in ubuntu machine to route 10.10.0.1 destined packets to

br-mgmt0 interface. When I ping WAN IP (10.10.0.5) from ubuntu machien, the ICMP packets are coming to eth0 (LAN)

on the router VM. I verified this by running tcpdump. But the router VM is not generating ICMP reply. Then I

disabled the firewall in router VM and even then it is not working. Then I ran the commands to masquerade to WAN

(eth1) Interface. Even then it is not working. then I tought that it may be due to some issue in openWRT and then I tried bring Ubuntu vmdk as router VM as

openstack instance. then I enabled the ip_forward flag to 1 to make it as router in Ubuntu VM. Ubuntu VM is having

routing entry with 10.10.0.1 as default gateway. When I ping WAN IP (10.10.0.5) from ubuntu machine, the ICMP

packets are coming to eth0 (LAN) on the Ubuntu router VM. it is aslo generating ICMP reply inside the VM but ICMP

replies are not coming out of LAN (eth0) or WAN(eth1). So Ubuntu machine is not seeing ICMP reply packets. Then I

did the maquerade as well in ubuntu VM and still not working.

I am really not sure whether openstack Firewall entries in Ubuntu machine IP tables are blocking or something else

or I am making some mistakes. Can somebody provide some sugesstion to make this working?. If this works I thought

of pointing my client VM or client hosts to point to router VM LAN IP. So that it can apply firewall and NAT

service for this clients.