<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    <div class="moz-forward-container">Hello All,<br>
      <br>
      I am unable to ping VM on its floating IP from external network.
      Interestingly I am able to ping external network from VM.<br>
      VM's: Fixed IP 10.0.0.3, Floating IP 192.168.2.161/24. <br>
      <br>
      Appreciate any inputs here.<br>
      <br>
       #quantum router-list<br>
+--------------------------------------+---------+--------------------------------------------------------+<br>
      | id                                   | name    |
      external_gateway_info                                  |<br>
+--------------------------------------+---------+--------------------------------------------------------+<br>
      | 27b3117b-1fe7-43b6-a1af-6c4cd54387bb | router1 | {"network_id":
      "246f3475-1113-479a-a478-ee2b91c09b82"} |<br>
+--------------------------------------+---------+--------------------------------------------------------+<br>
      <br>
      root@controller-desktop:~# <br>
      root@controller-desktop:~# quantum port-list --
      --27b3117b-1fe7-43b6-a1af-6c4cd54387bb<br>
+--------------------------------------+------+-------------------+--------------------------------------------------------------------------------------+<br>
      | id                                   | name | mac_address      
      |
      fixed_ips                                                                           
      |<br>
+--------------------------------------+------+-------------------+--------------------------------------------------------------------------------------+<br>
      | 0e54497a-c4da-4d24-bdcf-50d9bc7349fc |      | fa:16:3e:7a:93:47
      | {"subnet_id": "78e72581-6079-4758-beb1-e35751c428f8",
      "ip_address": "10.0.0.1"}      |<br>
      | 146fa6ef-4051-493f-a1f5-caaf7d6be106 |      | fa:16:3e:60:40:44
      | {"subnet_id": "b0955be1-cefe-4fb8-b607-01ff93af5753",
      "ip_address": "192.168.2.161"} |<br>
      | 41d1f801-febd-4559-9253-b661623cdf95 |      | fa:16:3e:2a:40:2d
      | {"subnet_id": "78e72581-6079-4758-beb1-e35751c428f8",
      "ip_address": "10.0.0.3"}      |<br>
      | db7f14be-a460-4dfb-87df-8098cf16489f |      | fa:16:3e:f5:22:21
      | {"subnet_id": "78e72581-6079-4758-beb1-e35751c428f8",
      "ip_address": "10.0.0.2"}      |<br>
      | ee9f258e-0f4a-463a-b2d8-738d00b246f7 |      | fa:16:3e:b1:c5:46
      | {"subnet_id": "b0955be1-cefe-4fb8-b607-01ff93af5753",
      "ip_address": "192.168.2.160"} |<br>
+--------------------------------------+------+-------------------+--------------------------------------------------------------------------------------+<br>
      <br>
      root@controller-desktop:~# quantum floatingip-list<br>
+--------------------------------------+------------------+---------------------+--------------------------------------+<br>
      | id                                   | fixed_ip_address |
      floating_ip_address | port_id                              |<br>
+--------------------------------------+------------------+---------------------+--------------------------------------+<br>
      | e045f346-a4f3-44c2-9c9e-0f02d95107a8 | 10.0.0.3         |
      192.168.2.161       | 41d1f801-febd-4559-9253-b661623cdf95 |<br>
+--------------------------------------+------------------+---------------------+--------------------------------------+<br>
      root@controller-desktop:~# <br>
      <br>
      +++++++++++ Routers Routing tables ++++++++++++<br>
      ~# ip netns exec qrouter-27b3117b-1fe7-43b6-a1af-6c4cd54387bb
      route -n<br>
      Kernel IP routing table<br>
      Destination     Gateway         Genmask         Flags Metric
      Ref    Use Iface<br>
      0.0.0.0         192.168.2.254   0.0.0.0         UG    0     
      0        0 qg-ee9f258e-0f<br>
      10.0.0.0        0.0.0.0         255.255.255.0   U     0     
      0        0 qr-0e54497a-c4<br>
      192.168.2.0     0.0.0.0         255.255.255.0   U     0     
      0        0 qg-ee9f258e-0f<br>
      root@controller-desktop:~# <br>
      <br>
      <br>
      +++++++++ Routers NAT policy +++++++++++++++++<br>
      <br>
      # ip netns exec qrouter-27b3117b-1fe7-43b6-a1af-6c4cd54387bb
      iptables -t nat -L -vn<br>
      Chain PREROUTING (policy ACCEPT 5008 packets, 475K bytes)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
       5013  475K quantum-l3-agent-PREROUTING  all  --  *      *      
      0.0.0.0/0            0.0.0.0/0           <br>
      <br>
      Chain INPUT (policy ACCEPT 528 packets, 140K bytes)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
      <br>
      Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
          1    84 quantum-l3-agent-OUTPUT  all  --  *      *      
      0.0.0.0/0            0.0.0.0/0           <br>
      <br>
      Chain POSTROUTING (policy ACCEPT 5 packets, 420 bytes)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
         10   840 quantum-l3-agent-POSTROUTING  all  --  *      *      
      0.0.0.0/0            0.0.0.0/0           <br>
         10   840 quantum-postrouting-bottom  all  --  *      *      
      0.0.0.0/0            0.0.0.0/0           <br>
      <br>
      Chain quantum-l3-agent-OUTPUT (1 references)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
          1    84 DNAT       all  --  *      *      
      0.0.0.0/0            192.168.2.161        to:10.0.0.3<br>
      <br>
      Chain quantum-l3-agent-POSTROUTING (1 references)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
          0     0 ACCEPT     all  --  !qg-ee9f258e-0f !qg-ee9f258e-0f 
      0.0.0.0/0            0.0.0.0/0            ! ctstate DNAT<br>
      <br>
      Chain quantum-l3-agent-PREROUTING (1 references)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
          5   420 DNAT       all  --  *      *      
      0.0.0.0/0            192.168.2.161        to:10.0.0.3<br>
      <br>
      Chain quantum-l3-agent-float-snat (1 references)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
          5   420 SNAT       all  --  *      *      
      10.0.0.3             0.0.0.0/0            to:192.168.2.161<br>
      <br>
      Chain quantum-l3-agent-snat (1 references)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
         10   840 quantum-l3-agent-float-snat  all  --  *      *      
      0.0.0.0/0            0.0.0.0/0           <br>
          0     0 SNAT       all  --  *      *      
      10.0.0.0/24          0.0.0.0/0            to:192.168.2.160<br>
      <br>
      Chain quantum-postrouting-bottom (1 references)<br>
       pkts bytes target     prot opt in     out    
      source               destination         <br>
         10   840 quantum-l3-agent-snat  all  --  *      *      
      0.0.0.0/0            0.0.0.0/0           <br>
      root@controller-desktop:~# <br>
      <br>
      <br>
      Following is the link which we used to create floating IPs.<br>
      <br>
      <b><a moz-do-not-send="true"
href="http://docs.openstack.org/trunk/openstack-network/admin/content/demo_logical_network_config.html">http://docs.openstack.org/trunk/openstack-network/admin/content/demo_logical_network_config.html</a></b><br>
      <br>
      Thanks,<br>
      Shyam.<br>
      <br>
    </div>
    <br>
  </body>
</html>