<div dir="ltr"><div>Hi,</div><div><br></div><div>I have followed OpenStack installation guide for Queens [0][1].</div><div><br></div><div>In my setup: I have 3 servers. 1 controller , 2 compute nodes - with Ubuntu 16.04, behind my firewall (OpenBSD)</div><div><br></div><div><b>Issue 1:</b> All my severs have several NIC, but I wanted to use at least two NIC, but I am able to connect to my servers only with one of the NIC. I could not figure, what is wrong with my settings.</div><div><br></div><div><font face="courier new, monospace">root@</font>h018<font face="courier new, monospace">:~# cat /etc/network/interfaces<br># This file describes the network interfaces available on your system<br># and how to activate them. For more information, see interfaces(5).<br><br>source /etc/network/interfaces.d/*<br><br># The loopback network interface<br>auto lo<br>iface lo inet loopback<br><br><br>iface eth5 inet static<br>iface eth4 inet static<br>auto eth3<br>iface eth3 inet static<br> address 10.4.15.118<br>   netmask 255.255.255.0<br> network 10.4.15.0<br>     broadcast 10.4.15.255<br> gateway 10.4.15.1<br>auto eth2<br>iface eth2 inet static<br>  address 10.3.15.118<br>   netmask 255.255.255.0<br> network 10.3.15.0<br>        broadcast 10.3.15.255<br>  gateway 10.3.15.1<br>auto eth1<br>iface eth1 inet static<br>  address 10.2.14.118<br>   netmask 255.255.255.0<br> network 10.2.14.0<br>     broadcast 10.2.14.255<br>        gateway 10.2.14.1<br># The primary network interface<br>auto eth0<br>iface eth0 inet static<br>      address 10.1.14.118<br>   netmask 255.255.255.0<br> network 10.1.14.0<br>     broadcast 10.1.14.255<br> gateway 10.1.14.1<br>     # dns-* options are implemented by the resolvconf package, if installed<br>       dns-nameservers 10.1.14.1 8.8.8.8 8.8.4.4</font><br></div><div><br></div><div><b>Issue 2:</b> I have completed my OpenStack installation by following [1], after creating the VM and associating the floating IP, everything is fine. But I am not able to ping or SSH to the VM. I have add the ICMP and SSH to my security group rules.</div><div><br></div><div>I configured my l2 bridge to use Eth1, which is not reachable from firewall or this might be all together a different problem, as my VM creation is successful without any errors.</div><div><br></div><div><font face="courier new, monospace">root@h018:~# openstack network create  --share --external --provider-physical-network provider --provider-network-type flat provider-network<br>+---------------------------+--------------------------------------+<br>| Field                     | Value                                |<br>+---------------------------+--------------------------------------+<br>| admin_state_up            | UP                                   |<br>| availability_zone_hints   |                                      |<br>| availability_zones        |                                      |<br>| created_at                | 2019-06-03T09:45:20Z                 |<br>| description               |                                      |<br>| dns_domain                | None                                 |<br>| id                        | 5e8f5ec9-9a65-4259-a246-1c7f95a2f33a |<br>| ipv4_address_scope        | None                                 |<br>| ipv6_address_scope        | None                                 |<br>| is_default                | False                                |<br>| is_vlan_transparent       | None                                 |<br>| mtu                       | 1500                                 |<br>| name                      | provider-network                     |<br>| port_security_enabled     | True                                 |<br>| project_id                | bb0f22d6efd64b31be6c37edc796d53e     |<br>| provider:network_type     | flat                                 |<br>| provider:physical_network | provider                             |<br>| provider:segmentation_id  | None                                 |<br>| qos_policy_id             | None                                 |<br>| revision_number           | 5                                    |<br>| router:external           | External                             |<br>| segments                  | None                                 |<br>| shared                    | True                                 |<br>| status                    | ACTIVE                               |<br>| subnets                   |                                      |<br>| tags                      |                                      |<br>| updated_at                | 2019-06-03T09:45:20Z                 |<br>+---------------------------+--------------------------------------+<br>root@h018:~#<br>root@h018:~# openstack subnet create --network provider-network \<br>>   --allocation-pool start=</font><font face="courier new, monospace">XX.</font><span style="font-family:"courier new",monospace">XX</span><font face="courier new, monospace">.169.101,end=</font><font face="courier new, monospace">XX.</font><span style="font-family:"courier new",monospace">XX</span><font face="courier new, monospace">.169.250 \<br>>   --dns-nameserver 8.8.4.4 --gateway </font><font face="courier new, monospace">XX.</font><span style="font-family:"courier new",monospace">XX</span><font face="courier new, monospace">.169.1 \<br>>   --subnet-range XX.</font><span style="font-family:"courier new",monospace">XX</span><font face="courier new, monospace">.169.0/24 provider<br>+-------------------+--------------------------------------+<br>| Field             | Value                                |<br>+-------------------+--------------------------------------+<br>| allocation_pools  | </font><font face="courier new, monospace">XX.</font><span style="font-family:"courier new",monospace">XX</span><font face="courier new, monospace">.169.101-</font><font face="courier new, monospace">XX.</font><span style="font-family:"courier new",monospace">XX</span><font face="courier new, monospace">.169.250        |<br>| cidr              | </font><font face="courier new, monospace">XX.</font><span style="font-family:"courier new",monospace">XX</span><font face="courier new, monospace">.169.0/24                      |<br>| created_at        | 2019-06-03T09:49:45Z                 |<br>| description       |                                      |<br>| dns_nameservers   | 8.8.4.4                              |<br>| enable_dhcp       | True                                 |<br>| gateway_ip        | </font><font face="courier new, monospace">XX.</font><span style="font-family:"courier new",monospace">XX</span><font face="courier new, monospace">.169.1                         |<br>| host_routes       |                                      |<br>| id                | 51fb740f-1f06-4f6c-93c5-3690488e3980 |<br>| ip_version        | 4                                    |<br>| ipv6_address_mode | None                                 |<br>| ipv6_ra_mode      | None                                 |<br>| name              | provider                             |<br>| network_id        | 5e8f5ec9-9a65-4259-a246-1c7f95a2f33a |<br>| project_id        | bb0f22d6efd64b31be6c37edc796d53e     |<br>| revision_number   | 0                                    |<br>| segment_id        | None                                 |<br>| service_types     |                                      |<br>| subnetpool_id     | None                                 |<br>| tags              |                                      |<br>| updated_at        | 2019-06-03T09:49:45Z                 |<br>+-------------------+--------------------------------------+</font><br></div><div><br></div><div><font face="courier new, monospace">root@h018:~# neutron net-external-list<br>neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.<br>+--------------------------------------+------------------+----------------------------------+------------------------------------------------------+<br>| id                                   | name             | tenant_id                        | subnets                                              |<br>+--------------------------------------+------------------+----------------------------------+------------------------------------------------------+<br>| 5e8f5ec9-9a65-4259-a246-1c7f95a2f33a | provider-network | bb0f22d6efd64b31be6c37edc796d53e | 51fb740f-1f06-4f6c-93c5-3690488e3980 XX.XX.169.0/24 |<br>+--------------------------------------+------------------+----------------------------------+------------------------------------------------------+<br></font></div><div><font face="courier new, monospace">root@h018:~# openstack network list<br>+--------------------------------------+------------------+--------------------------------------+<br>| ID                                   | Name             | Subnets                              |<br>+--------------------------------------+------------------+--------------------------------------+<br>| 3ee95928-012f-4a55-a0b3-e277c2d45080 | demo-network     | 3427b6ac-3bc0-4529-9035-33e1ab05cb64 |<br>| 5e8f5ec9-9a65-4259-a246-1c7f95a2f33a | provider-network | 51fb740f-1f06-4f6c-93c5-3690488e3980 |<br>+--------------------------------------+------------------+--------------------------------------+<br>root@h018:~# nova list<br>+--------------------------------------+--------+--------+------------+-------------+----------------------------------------+<br>| ID                                   | Name   | Status | Task State | Power State | Networks                               |<br>+--------------------------------------+--------+--------+------------+-------------+----------------------------------------+<br>| 3f8ab4c2-9047-47c4-8634-0c93cf7d7460 | test15 | ACTIVE | -          | Running     | demo-network=10.1.0.12, XX.XX.169.108 |<br>+--------------------------------------+--------+--------+------------+-------------+----------------------------------------+<br>root@h018:~# openstack port list<br>+--------------------------------------+------+-------------------+-------------------------------------------------------------------------------+--------+<br>| ID                                   | Name | MAC Address       | Fixed IP Addresses                                                            | Status |<br>+--------------------------------------+------+-------------------+-------------------------------------------------------------------------------+--------+<br>| 037d801d-5cae-4d88-ae2d-a4289a542057 |      | fa:16:3e:a6:68:7b | ip_address='10.1.0.2', subnet_id='3427b6ac-3bc0-4529-9035-33e1ab05cb64'       | ACTIVE |<br>| 327fe5fe-4288-4d80-850c-fa7d7e29d3aa |      | fa:16:3e:2f:0f:dd | ip_address='XX.XX.169.101', subnet_id='51fb740f-1f06-4f6c-93c5-3690488e3980' | ACTIVE |<br>| 4208ac23-42bf-44ed-8b0d-af1e615b2542 |      | fa:16:3e:c5:cb:94 | ip_address='XX.XX.169.108', subnet_id='51fb740f-1f06-4f6c-93c5-3690488e3980' | <font color="#ff0000">N/A</font>    |   (VM)<br>| 642729e6-f84c-4742-89b2-e5924d8e188e |      | fa:16:3e:37:97:eb | ip_address='</font><span style="font-family:"courier new",monospace">XX.XX</span><font face="courier new, monospace">.169.107', subnet_id='51fb740f-1f06-4f6c-93c5-3690488e3980' | ACTIVE |<br>| bf5c3061-0c40-41da-bebf-95650e055ce2 |      | fa:16:3e:03:bd:f8 | ip_address='10.1.0.1', subnet_id='3427b6ac-3bc0-4529-9035-33e1ab05cb64'       | ACTIVE |<br>| fdf976c0-99c6-49e4-b3db-9f26a09da7a9 |      | fa:16:3e:c0:be:e9 | ip_address='10.1.0.12', subnet_id='3427b6ac-3bc0-4529-9035-33e1ab05cb64'      | ACTIVE |<br>+--------------------------------------+------+-------------------+-------------------------------------------------------------------------------+--------+<br>root@h018:~# ping -c4 XX.XX.169.101<br>PING XX.XX.169.101 (XX.XX.169.101) 56(84) bytes of data.<br><br>--- XX.XX.169.101 ping statistics ---<br>4 packets transmitted, 0 received, 100% packet loss, time 3024ms</font><br></div><div><font face="courier new, monospace">root@h018:~# ping -c4 </font><span style="font-family:"courier new",monospace">XX.XX</span><font face="courier new, monospace">.169.107<br>PING </font><span style="font-family:"courier new",monospace">XX.XX</span><font face="courier new, monospace">.169.107 (</font><span style="font-family:"courier new",monospace">XX.XX</span><font face="courier new, monospace">.169.107) 56(84) bytes of data.<br><br>--- </font><span style="font-family:"courier new",monospace">XX.XX</span><font face="courier new, monospace">.169.107 ping statistics ---<br>4 packets transmitted, 0 received, 100% packet loss, time 3023ms<br>root@h018:~# ping -c4 </font><span style="font-family:"courier new",monospace">XX.XX</span><font face="courier new, monospace">.169.108<br>PING </font><span style="font-family:"courier new",monospace">XX.XX</span><font face="courier new, monospace">.169.108 (</font><span style="font-family:"courier new",monospace">XX.XX</span><font face="courier new, monospace">.169.108) 56(84) bytes of data.<br><br>--- </font><span style="font-family:"courier new",monospace">XX.XX</span><font face="courier new, monospace">.169.108 ping statistics ---<br>4 packets transmitted, 0 received, 100% packet loss, time 3001ms<br></font></div><div><font face="courier new, monospace">root@h018:~# openstack server list<br>+--------------------------------------+--------+--------+----------------------------------------+-------------+----------+<br>| ID                                   | Name   | Status | Networks                               | Image       | Flavor   |<br>+--------------------------------------+--------+--------+----------------------------------------+-------------+----------+<br>| 3f8ab4c2-9047-47c4-8634-0c93cf7d7460 | test15 | ACTIVE | demo-network=10.1.0.12, XX.XX.169.108 | Ubuntu16.04 | m1.small |<br>+--------------------------------------+--------+--------+----------------------------------------+-------------+----------+<br></font></div><div><font face="courier new, monospace">root@h018:~# ip route <br>default via 10.1.14.1 dev eth0 <br><a href="http://10.1.14.0/24">10.1.14.0/24</a> dev eth0  proto kernel  scope link  src 10.1.14.118 <br><a href="http://10.2.14.0/24">10.2.14.0/24</a> dev brq5e8f5ec9-9a  proto kernel  scope link  src 10.2.14.118 <br><a href="http://10.3.15.0/24">10.3.15.0/24</a> dev eth2  proto kernel  scope link  src 10.3.15.118 <br><a href="http://10.4.15.0/24">10.4.15.0/24</a> dev eth3  proto kernel  scope link  src 10.4.15.118 <br>root@h018:~# ifconfig <br>brq3ee95928-01 Link encap:Ethernet  HWaddr 72:77:4f:54:6a:93  <br>          inet6 addr: fe80::4459:b6ff:feb0:3352/64 Scope:Link<br>          UP BROADCAST RUNNING MULTICAST  MTU:1450  Metric:1<br>          RX packets:34 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:10 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:3144 (3.1 KB)  TX bytes:828 (828.0 B)<br><br>brq5e8f5ec9-9a Link encap:Ethernet  HWaddr 24:6e:96:84:25:1a  <br>          inet addr:10.2.14.118  Bcast:10.2.14.255  Mask:255.255.255.0<br>          inet6 addr: fe80::286d:e0ff:fefa:15a4/64 Scope:Link<br>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br>          RX packets:118004 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:10175 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:5834402 (5.8 MB)  TX bytes:1430189 (1.4 MB)<br><br>eth0      Link encap:Ethernet  HWaddr 24:6e:96:84:25:18  <br>          inet addr:10.1.14.118  Bcast:10.1.14.255  Mask:255.255.255.0<br>          inet6 addr: fe80::266e:96ff:fe84:2518/64 Scope:Link<br>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br>          RX packets:1977142 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:2514801 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:1013827869 (1.0 GB)  TX bytes:1529933345 (1.5 GB)<br><br>eth1      Link encap:Ethernet  HWaddr 24:6e:96:84:25:1a  <br>          inet6 addr: fe80::266e:96ff:fe84:251a/64 Scope:Link<br>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br>          RX packets:2622581 errors:0 dropped:14027 overruns:0 frame:0<br>          TX packets:327841 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:166482697 (166.4 MB)  TX bytes:28701550 (28.7 MB)<br><br>eth2      Link encap:Ethernet  HWaddr b4:96:91:0f:cd:28  <br>          inet addr:10.3.15.118  Bcast:10.3.15.255  Mask:255.255.255.0<br>          inet6 addr: fe80::b696:91ff:fe0f:cd28/64 Scope:Link<br>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br>          RX packets:272 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:45 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:16452 (16.4 KB)  TX bytes:2370 (2.3 KB)<br><br>eth3      Link encap:Ethernet  HWaddr b4:96:91:0f:cd:2a  <br>          inet addr:10.4.15.118  Bcast:10.4.15.255  Mask:255.255.255.0<br>          inet6 addr: fe80::b696:91ff:fe0f:cd2a/64 Scope:Link<br>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br>          RX packets:7546483 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:43 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:452789254 (452.7 MB)  TX bytes:2118 (2.1 KB)<br><br>lo        Link encap:Local Loopback  <br>          inet addr:127.0.0.1  Mask:255.0.0.0<br>          inet6 addr: ::1/128 Scope:Host<br>          UP LOOPBACK RUNNING  MTU:65536  Metric:1<br>          RX packets:42373349 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:42373349 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1 <br>          RX bytes:12244256693 (12.2 GB)  TX bytes:12244256693 (12.2 GB)<br><br>tap037d801d-5c Link encap:Ethernet  HWaddr ba:7a:4c:72:fb:05  <br>          UP BROADCAST RUNNING MULTICAST  MTU:1450  Metric:1<br>          RX packets:9 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:40 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:1950 (1.9 KB)  TX bytes:4088 (4.0 KB)<br><br>tap327fe5fe-42 Link encap:Ethernet  HWaddr 6e:a2:fd:08:dc:bb  <br>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br>          RX packets:7 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:107768 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:618 (618.0 B)  TX bytes:6253098 (6.2 MB)<br><br>tap642729e6-f8 Link encap:Ethernet  HWaddr 5a:11:77:05:54:e0  <br>          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br>          RX packets:11858 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:94601 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:498656 (498.6 KB)  TX bytes:5676060 (5.6 MB)<br><br>tapbf5c3061-0c Link encap:Ethernet  HWaddr 72:77:4f:54:6a:93  <br>          UP BROADCAST RUNNING MULTICAST  MTU:1450  Metric:1<br>          RX packets:9122 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:9186 errors:0 dropped:0 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:928979 (928.9 KB)  TX bytes:711090 (711.0 KB)<br><br>vxlan-8   Link encap:Ethernet  HWaddr a6:77:6e:2b:f7:1f  <br>          UP BROADCAST RUNNING MULTICAST  MTU:1450  Metric:1<br>          RX packets:9186 errors:0 dropped:0 overruns:0 frame:0<br>          TX packets:9113 errors:0 dropped:19 overruns:0 carrier:0<br>          collisions:0 txqueuelen:1000 <br>          RX bytes:582486 (582.4 KB)  TX bytes:801919 (801.9 KB)<br><br>root@h018:~#<br></font></div><div><br></div><div>If any other information is required , please let me know. I will share the info. I have seen many posts with similar issues, steps which worked for them are not working in my setup. May be I have done something wrong, not able to figure out that on my own.</div><div><br></div><div>Thanks and regards,</div><div>Jayachander.</div><div><br></div><div>[0] <a href="https://docs.openstack.org/install-guide/">https://docs.openstack.org/install-guide/</a>. </div><div>[1] <a href="https://docs.openstack.org/install-guide/openstack-services.html#minimal-deployment-for-queens">https://docs.openstack.org/install-guide/openstack-services.html#minimal-deployment-for-queens</a><br></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><span lang="EN-GB" style="font-size:18pt;font-family:Webdings;color:green"><div style="font-family:arial,helvetica,sans-serif;display:inline"></div>P</span><span lang="EN-US" style="font-size:8pt;font-family:Arial,sans-serif;color:green">  </span><b style="font-family:Calibri,sans-serif;font-size:14.44444465637207px"><span lang="EN-US" style="font-size:8pt;color:green">SAVE PAPER – Please do not print this e-mail unless absolutely necessary.</span></b><br></div></div></div>