Hi Li, If you can ping out to the internet from your second vm but not back in it's most likely related to security groups. I'd try running: quantum security-group-rule-create --protocol icmp --direction ingress default and see if that allows ping from the internet to be received. Aaron On Mon, Jun 3, 2013 at 2:43 AM, Li, Leon <Leon.Li2 at emc.com> wrote: > Hi all,**** > > ** ** > > I set up an openstack recently. My first tenant’s VMs’ floating IP work > fine. All of them is pingable from “Internet”.**** > > However on second tenant, via GUI or CLI I can successfully assign > floating IPs to VMs, but they are not pingable. Meanwhile, I can ping > Internet from VM’s private network(IP).**** > > My environment: Grizzly. Quantum. 3 physical servers. One is controller; > one is network; and the other is compute node. GRE tunnel.**** > > Anyone has idea? Thanks for your help.**** > > ** ** > > Leon**** > > _______________________________________________ > Mailing list: https://launchpad.net/~openstack > Post to : openstack at lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20130603/1e12f137/attachment.html>