<div dir="ltr">Does vlan81 between bond0 and br-vlan reflect a VLAN subinterface on the host? If so, you need to remove it and attach bond0 directly to br-vlan because Open vSwitch performs the tagging for you.</div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 10, 2015 at 3:13 PM, Gustavo Randich <span dir="ltr"><<a href="mailto:gustavo.randich@gmail.com" target="_blank">gustavo.randich@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi,</div><div><br></div><div>I've tried without success to attach instances directly to external VLAN network using "provider:network_type vlan"; below are the details. Using "provider:network_type flat" I made it work.</div><div><br></div><div>I was basically following this: <a href="http://www.s3it.uzh.ch/blog/openstack-neutron-vlan/" target="_blank">http://www.s3it.uzh.ch/blog/openstack-neutron-vlan/</a></div><div><br></div><div>Any idea will be appreciated.</div><div><br></div><div>ML2 CONFIG</div><div>ml2_type_vlan network_vlan_ranges vlannet:81:91</div><div>bridge_mappings vlannet:br-vlan<br></div><div>enable_security_group True<br></div><div>enable_ipset True</div><div>firewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver</div><div><br></div><div>NETWORK CREATION</div><div>neutron net-create vlan81 --router:external True --provider:physical_network vlannet --provider:network_type vlan --provider:segmentation_id 81 --shared<br></div><div>neutron subnet-create vlan81 <a href="http://10.111.81.0/24" target="_blank">10.111.81.0/24</a> --name vlan81 --allocation-pool start=10.111.81.65,end=10.111.81.126 --enable-dhcp --gateway 10.111.81.254 --dns-nameserver 10.1.1.68 --dns-nameserver 10.1.1.42 --host-route destination=<a href="http://169.254.169.254/32,nexthop=10.111.81.65" target="_blank">169.254.169.254/32,nexthop=10.111.81.65</a><br></div><div><br></div><div>NETWORK CONFIGURATION OF COMPUTE/NETWORK NODES<br></div><div>em1 \<br></div><div> bond0 -> vlan81 -> | br-vlan | <-> | br-int |</div><div>em2 /</div><div><br></div><div>DEBUGGING</div><div><br></div><div>root@juno-dev02:~# ovs-ofctl dump-flows br-vlan</div><div>NXST_FLOW reply (xid=0x4):</div><div> cookie=0x0, duration=2991.439s, table=0, n_packets=5374, n_bytes=357405, idle_age=2, priority=4,in_port=5,dl_vlan=1 actions=mod_vlan_vid:81,NORMAL</div><div> cookie=0x0, duration=3439.498s, table=0, n_packets=3792, n_bytes=159460, idle_age=0, priority=2,in_port=5 actions=drop</div><div> cookie=0x0, duration=3440.064s, table=0, n_packets=113217, n_bytes=18712371, idle_age=0, priority=1 actions=NORMAL</div><div><br></div><div>root@juno-dev02:~# ovs-ofctl dump-flows br-int</div><div>NXST_FLOW reply (xid=0x4):</div><div> cookie=0x0, duration=3891.241s, table=0, n_packets=1448, n_bytes=157908, idle_age=1236, priority=3,in_port=7,dl_vlan=81 actions=mod_vlan_vid:1,NORMAL</div><div> cookie=0x0, duration=4339.435s, table=0, n_packets=26538, n_bytes=1584268, idle_age=1, priority=2,in_port=7 actions=drop</div><div> cookie=0x0, duration=4340.224s, table=0, n_packets=10686, n_bytes=590535, idle_age=1, priority=1 actions=NORMAL</div><div> cookie=0x0, duration=4340.153s, table=23, n_packets=0, n_bytes=0, idle_age=4340, priority=0 actions=drop</div><div><br></div><div>root@juno-dev02:~# nova list</div><div>+--------------------------------------+------+--------+------------+-------------+---------------------+</div><div>| ID | Name | Status | Task State | Power State | Networks |</div><div>+--------------------------------------+------+--------+------------+-------------+---------------------+</div><div>| 2f1a2cba-6fc7-45ae-a251-e709ab8b7ecc | test | ACTIVE | - | Running | vlan81=10.111.81.66 |</div><div>+--------------------------------------+------+--------+------------+-------------+---------------------+</div><div><br></div><div><br></div><div>Instance can reach DHCP server on network node (10.111.81.65), but cannot reach default gateway (10.111.81.254), nor any host of the external network.</div><div><br></div><div>The br-vlan bridge shows outgoing ARP packets tagged with vlan 81, and ARP replies not tagged, which I suppose it then drops because it does not match the first rule of br-vlan.</div><div><br></div><div>The br-int bridge shows only outgoin ARP packets:</div><div><br></div><div><br></div><div>root@juno-dev02:~# tcpdump -env -i br-vlan icmp or arp</div><div>tcpdump: listening on br-vlan, link-type EN10MB (Ethernet), capture size 65535 bytes</div><div>11:45:56.463254 fa:16:3e:58:74:5b > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 46: vlan 81, p 0, ethertype ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.111.81.254 tell 10.111.81.66, length 28</div><div>11:45:56.464491 78:19:f7:9b:2a:41 > fa:16:3e:58:74:5b, ethertype ARP (0x0806), length 56: Ethernet (len 6), IPv4 (len 4), Reply 10.111.81.254 is-at 78:19:f7:9b:2a:41, length 42</div><div>11:45:57.461253 fa:16:3e:58:74:5b > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 46: vlan 81, p 0, ethertype ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.111.81.254 tell 10.111.81.66, length 28</div><div>11:45:57.462765 78:19:f7:9b:2a:41 > fa:16:3e:58:74:5b, ethertype ARP (0x0806), length 56: Ethernet (len 6), IPv4 (len 4), Reply 10.111.81.254 is-at 78:19:f7:9b:2a:41, length 42</div><div><br></div><div>root@juno-dev02:~# tcpdump -env -i br-int icmp or arp</div><div>tcpdump: WARNING: br-int: no IPv4 address assigned</div><div>tcpdump: listening on br-int, link-type EN10MB (Ethernet), capture size 65535 bytes</div><div>11:29:49.330084 fa:16:3e:58:74:5b > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 46: vlan 1, p 0, ethertype ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.111.81.254 tell 10.111.81.66, length 28</div><div>11:29:50.162106 fa:16:3e:58:74:5b > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 46: vlan 1, p 0, ethertype ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.111.81.49 tell 10.111.81.66, length 28</div><div>11:29:51.180111 fa:16:3e:58:74:5b > ff:ff:ff:ff:ff:ff, ethertype 802.1Q (0x8100), length 46: vlan 1, p 0, ethertype ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.111.81.49 tell 10.111.81.66, length 28</div><div><br></div></div>
<br>_______________________________________________<br>
OpenStack-operators mailing list<br>
<a href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
<br></blockquote></div><br></div>