[Openstack-operators] [openstack-operators]disable snat for router gateway

Akshay Kumar Sanghai akshaykumarsanghai at gmail.com
Sat Jan 16 16:48:58 UTC 2016


Hi Aaron,
Do i need to add something in the iptables ? The setup is working fine with
floating ip and snat enabled router.

Thanks,
Akshay

On Sat, Jan 16, 2016 at 8:59 PM, Aaron Segura <aaron.segura at gmail.com>
wrote:

> That is correct.  You should be able to disable snat, then route the
> tenant network to the outside of the neutron router and communicate with
> your instances using their assigned fixed IP.
>
> If your outbound packets aren't leaving your router, you have another
> problem. Start checking iptables rules and make sure all of your plumbing
> is right.
>
> On Fri, Jan 15, 2016 at 5:55 PM Akshay Kumar Sanghai <
> akshaykumarsanghai at gmail.com> wrote:
>
>> Hi,
>> In the cli of neutron router-gateway-set, thers is an option of disable
>> snat.
>> http://docs.openstack.org/cli-reference/neutron.html#neutron-router-gateway-set
>>
>> Does that mean i can create a tenant network and the packet will go out
>> with the same fixed ip of the vm? Assume the tenant network created is
>> routable or identifiable in the physical network.
>> I tried to disable snat for the router gateway, but the packet wasn't
>> going out from the external interface. Do i need to edit some iptable rules
>> or the disable snat option doesn't work?
>>
>> Thanks,
>> Akshay
>> _______________________________________________
>> OpenStack-operators mailing list
>> OpenStack-operators at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160116/3dbbe086/attachment.html>


More information about the OpenStack-operators mailing list