<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix"><br>
      Namespace router's iptables:<br>
      --------------------------------------------<br>
      # ip netns exec qrouter-27b3117b-1fe7-43b6-a1af-6c4cd54387bb 
      iptables -L<br>
      Chain INPUT (policy ACCEPT)<br>
      target     prot opt source               destination         <br>
      quantum-l3-agent-INPUT  all  --  anywhere            
      anywhere            <br>
      <br>
      Chain FORWARD (policy ACCEPT)<br>
      target     prot opt source               destination         <br>
      quantum-filter-top  all  --  anywhere            
      anywhere            <br>
      quantum-l3-agent-FORWARD  all  --  anywhere            
      anywhere            <br>
      <br>
      Chain OUTPUT (policy ACCEPT)<br>
      target     prot opt source               destination         <br>
      quantum-filter-top  all  --  anywhere            
      anywhere            <br>
      quantum-l3-agent-OUTPUT  all  --  anywhere            
      anywhere            <br>
      <br>
      Chain quantum-filter-top (2 references)<br>
      target     prot opt source               destination         <br>
      quantum-l3-agent-local  all  --  anywhere            
      anywhere            <br>
      <br>
      Chain quantum-l3-agent-FORWARD (1 references)<br>
      target     prot opt source               destination         <br>
      <br>
      Chain quantum-l3-agent-INPUT (1 references)<br>
      target     prot opt source               destination         <br>
      <br>
      Chain quantum-l3-agent-OUTPUT (1 references)<br>
      target     prot opt source               destination         <br>
      <br>
      Chain quantum-l3-agent-local (1 references)<br>
      target     prot opt source               destination         <br>
      root@controller-desktop:/home/controller# <br>
      <br>
      <br>
      On Monday 26 November 2012 12:41 PM, Igor Laskovy wrote:<br>
    </div>
    <blockquote
cite="mid:CAC+dAwGOrFJ9gQBfY3ODwPpimBj9NKW8Z9iWRn2+pMQiGJg0TQ@mail.gmail.com"
      type="cite">
      <p>Please give to us your iptables -L</p>
      <p>Igor Laskovy<br>
        <a moz-do-not-send="true"
          href="http://facebook.com/igor.laskovy">facebook.com/igor.laskovy</a><br>
        Kiev, Ukraine</p>
      <div class="gmail_quote">On Nov 24, 2012 7:02 PM, "Shyam Goud"
        <<a moz-do-not-send="true"
          href="mailto:shyam.todeti@oneconvergence.com">shyam.todeti@oneconvergence.com</a>>
        wrote:<br type="attribution">
        <blockquote class="gmail_quote" style="margin:0 0 0
          .8ex;border-left:1px #ccc solid;padding-left:1ex">
          <div bgcolor="#FFFFFF" text="#000000">
            <div>Oleg,<br>
              <br>
              It shows the ip_forward flag enabled.<br>
              <br>
              # ip netns exec
              qrouter-f3554f15-78c0-4402-8df5-55ebb8da3f4c sysctl
              net.ipv4.ip_forward<br>
              net.ipv4.ip_forward = 1<br>
              <br>
              Thanks,<br>
              <br>
              On Saturday 24 November 2012 12:51 PM, Oleg Gelbukh wrote:<br>
            </div>
            <blockquote type="cite">Hello,
              <div><br>
              </div>
              <div>Just to make sure, what is ip_forward set to on the
                router?</div>
              <div><br>
              </div>
              <div>--</div>
              <div>Oleg Gelbukh</div>
              <div>Sr. IT Engineer,</div>
              <div>Mirantis IT</div>
              <div class="gmail_extra"><br>
                <br>
                <div class="gmail_quote">On Fri, Nov 23, 2012 at 4:33
                  PM, Shyam Goud <span dir="ltr"><<a
                      moz-do-not-send="true"
                      href="mailto:shyam.todeti@oneconvergence.com"
                      target="_blank">shyam.todeti@oneconvergence.com</a>></span>
                  wrote:<br>
                  <blockquote class="gmail_quote" style="margin:0 0 0
                    .8ex;border-left:1px #ccc solid;padding-left:1ex">
                    All,<br>
                    <br>
                    Under one Tenant created 1 network with 2 subnets [<a
                      moz-do-not-send="true" href="http://10.10.10.0/24"
                      target="_blank">10.10.10.0/24</a> and<br>
                    <a moz-do-not-send="true"
                      href="http://20.20.20.0/24" target="_blank">20.20.20.0/24</a>]
                    and 1 Router with 2 interfaces attached to
                    corresponding<br>
                    subnets.<br>
                    <br>
                    1. Ping b/w same subnet VMs successful.<br>
                    2. Ping to all Router/DHCP (10.10.10.1 & 2/<a
                      moz-do-not-send="true" href="http://20.20.20.1"
                      target="_blank">20.20.20.1</a> & 2) from both<br>
                    subnet VMs is successful<br>
                    3. Ping across subnet VMs fails.<br>
                    <br>
                    Am I missing something here, to reach across subnets
                    ?<br>
                    <br>
                    ++++++++++++ Router's routing table +++++++++++++<br>
                    controller-desktop:~# ip netns exec<br>
                    qrouter-f3554f15-78c0-4402-8df5-55ebb8da3f4c route
                    -n<br>
                    Kernel IP routing table<br>
                    Destination     Gateway         Genmask        
                    Flags Metric Ref Use Iface<br>
                    10.10.10.0      0.0.0.0         255.255.255.0   U  
                      0 0        0<br>
                    qr-ff10b98d-55<br>
                    20.20.20.0      0.0.0.0         255.255.255.0   U  
                      0 0        0<br>
                    qr-c5c00091-e4<br>
                    root@controller-desktop:~#<br>
                    +++++++++++++++++++++++++++++++++++++++++++++++++<br>
                    <br>
                    Thanks,<br>
                    Shyam.<br>
                    <br>
                    <br>
                    <br>
                    <br>
                    <br>
                    _______________________________________________<br>
                    OpenStack-operators mailing list<br>
                    <a moz-do-not-send="true"
                      href="mailto:OpenStack-operators@lists.openstack.org"
                      target="_blank">OpenStack-operators@lists.openstack.org</a><br>
                    <a moz-do-not-send="true"
href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators"
                      target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
                  </blockquote>
                </div>
                <br>
              </div>
            </blockquote>
            <br>
          </div>
          <br>
          _______________________________________________<br>
          OpenStack-operators mailing list<br>
          <a moz-do-not-send="true"
            href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br>
          <a moz-do-not-send="true"
href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators"
            target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
          <br>
        </blockquote>
      </div>
    </blockquote>
    <br>
  </body>
</html>