[Openstack-operators] Neutron firewall blocking GRE

Kevin Benton kevin at benton.pub
Fri Apr 15 09:17:18 UTC 2016


Do you have a security groups allow rule for GRE? If so, do you have
the nf_conntrack_proto_gre module loaded on your compute nodes? If not, the
security groups iptables filtering will end up dropping the GRE packets.

On Fri, Apr 15, 2016 at 1:38 AM, Cory Hawkless <Cory at hawkless.id.au> wrote:

> Does anyone know if there is any reason I’m having trouble getting GRE
> traffic into my instances?
>
> I have a router out on the internet an I’m trying to build a GRE tunnel
> into an instance to link a site office to my Openstack network, but looking
> at packet dumps from inside the VM I can’t see any GRE packets making it in
> at all?
>
>
>
> Regards,
>
> Cory
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160415/3ae7c170/attachment.html>


More information about the OpenStack-operators mailing list