<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=utf-8">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:宋体;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@宋体";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:宋体;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:宋体;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"批注框文本 Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:9.0pt;
font-family:宋体;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.Char
{mso-style-name:"批注框文本 Char";
mso-style-priority:99;
mso-style-link:批注框文本;
font-family:宋体;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=ZH-CN link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Hi <o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I use Flat DHCP in openstack<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>My nova.conf as follow :<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--dhcpbridge_flagfile=/etc/nova/nova.conf<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--dhcpbridge=/usr/bin/nova-dhcpbridge<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--logdir=/var/log/nova<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--state_path=/var/lib/nova<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--lock_path=/run/lock/nova<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--allow_admin_api=true<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--use_deprecated_auth=false<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--auth_strategy=keystone<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--scheduler_driver=nova.scheduler.simple.SimpleScheduler<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--s3_host=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--ec2_host=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--rabbit_host=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--cc_host=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--nova_url=http://192.168.7.151:8774/v1.1/<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--routing_source_ip=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--glance_api_servers=192.168.7.151:9292<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--image_service=nova.image.glance.GlanceImageService<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--iscsi_ip_prefix=192.168.4<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--sql_connection=mysql://root:hisoft@192.168.7.151/nova<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--ec2_url=http://192.168.7.151:8773/services/Cloud<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--keystone_ec2_url=http://192.168.7.151:5000/v2.0/ec2tokens<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--api_paste_config=/etc/nova/api-paste.ini<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--libvirt_type=qemu<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--libvirt_use_virtio_for_bridges=true<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--start_guests_on_host_boot=true<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--resume_guests_state_on_host_boot=true<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'># vnc specific configuration<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--novnc_enabled=true<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--novncproxy_base_url=http://192.168.7.151:6080/vnc_auto.html<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--vncserver_proxyclient_address=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--vncserver_listen=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'># network specific settings<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--network_manager=nova.network.manager.FlatDHCPManager<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--public_interface=br100<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--flat_interface=eth0<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--flat_network_bridge=br100<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--fixed_range=192.168.4.0/27<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--floating_range=192.168.7.208/28<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--network_size=32<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--flat_injected=False<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--force_dhcp_release<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--iscsi_helper=tgtadm<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--connection_type=libvirt<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--root_helper=sudo nova-rootwrap<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--verbose<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><b><span
lang=EN-US style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>David(</span></b><b><span style='font-size:9.0pt;color:#1F497D'>李跃洲</span></b><b><span
lang=EN-US style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>)<o:p></o:p></span></b></p>
<p class=MsoNormal style='text-align:justify;text-justify:inter-ideograph'><b><span
lang=EN-US style='font-size:9.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>E-MAIL: yuezhou.li@hisoft.com<o:p></o:p></span></b></p>
<p class=MsoNormal><span lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span style='font-size:10.0pt'>发件人<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> Kris zhang [mailto:zhang.kris@gmail.com] <br>
</span><b><span style='font-size:10.0pt'>发送时间<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> 2012</span><span style='font-size:10.0pt'>年<span
lang=EN-US>6</span>月<span lang=EN-US>15</span>日<span lang=EN-US> 18:38<br>
</span><b>收件人<span lang=EN-US>:</span></b><span lang=EN-US> David<br>
</span><b>抄送<span lang=EN-US>:</span></b><span lang=EN-US> Emilien Macchi;
openstack@lists.launchpad.net<br>
</span><b>主题<span lang=EN-US>:</span></b><span lang=EN-US> Re: [Openstack] </span>答复<span
lang=EN-US>: </span>答复<span lang=EN-US>: instance cannot access outside network<o:p></o:p></span></span></p>
</div>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Did you use the VLAN?<o:p></o:p></span></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US><o:p> </o:p></span></p>
<div>
<p class=MsoNormal><span lang=EN-US>On Fri, Jun 15, 2012 at 6:00 PM, David <<a
href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<o:p></o:p></span></p>
<div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Hi </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I use FlatDHCP mode actually .</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>And br100 as flat bridge , flat interface is eth0</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Also part of iptable rule on compute-node :</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-compute-inst-2 -m state --state INVALID -j DROP</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-compute-inst-2 -m state --state RELATED,ESTABLISHED -j
ACCEPT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-compute-inst-2 -j nova-compute-provider</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-compute-inst-2 -s <a href="http://192.168.4.1/32"
target="_blank">192.168.4.1/32</a> -p udp -m udp --sport 67 --dport 68 -j
ACCEPT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-compute-inst-2 -s <a href="http://192.168.4.0/27"
target="_blank">192.168.4.0/27</a> -j ACCEPT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-compute-inst-2 -j nova-compute-sg-fallback</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-compute-local -d <a href="http://192.168.4.3/32"
target="_blank">192.168.4.3/32</a> -j nova-compute-inst-2</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-compute-sg-fallback -j DROP</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-filter-top -j nova-compute-local</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>And the output of ~#cat
/proc/sys/net/ipv4/ip_forward is 1 </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Output of ~# ip addr :</span><span lang=EN-US><o:p></o:p></span></p>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UP </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> link/ether 00:0c:29:cf:ec:d7 brd
ff:ff:ff:ff:ff:ff</span><span lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> inet <a href="http://192.168.7.153/27"
target="_blank">192.168.7.153/27</a> brd 192.168.7.159 scope global br100</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> inet <a href="http://192.168.4.1/27"
target="_blank">192.168.4.1/27</a> scope global br100</span><span lang=EN-US><o:p></o:p></span></p>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> inet6 fe80::20c:29ff:fecf:ecd7/64 scope link </span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> valid_lft forever preferred_lft forever</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>So these looks all reasonable . I really don’t know why the vm
cannot get ip </span><span lang=EN-US style='font-size:10.5pt;font-family:Wingdings;
color:#1F497D'>L</span><span lang=EN-US style='font-size:10.5pt;font-family:
"Calibri","sans-serif";color:#1F497D'>.</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Thank you </span><span lang=EN-US><o:p></o:p></span></p>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Best Regards</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
text-align:justify;text-justify:inter-ideograph'><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>David(</span></b><b><span
style='font-size:9.0pt;color:#1F497D'>李跃洲</span></b><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>)</span></b><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
text-align:justify;text-justify:inter-ideograph'><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>E-MAIL:
<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
</div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<div>
<p class=MsoNormal><b><span style='font-size:10.0pt'>发件人<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> <a href="mailto:emilien.macchi@gmail.com"
target="_blank">emilien.macchi@gmail.com</a> [mailto:<a
href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a>]
</span><b><span style='font-size:10.0pt'>代表 </span></b><span lang=EN-US
style='font-size:10.0pt'>Emilien Macchi</span><span lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal><b><span style='font-size:10.0pt'>发送时间<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> 2012</span><span style='font-size:10.0pt'>年<span
lang=EN-US>6</span>月<span lang=EN-US>15</span>日<span lang=EN-US> 17:38<br>
</span><b>收件人<span lang=EN-US>:</span></b><span lang=EN-US> David<br>
</span><b>抄送<span lang=EN-US>:</span></b><span lang=EN-US> <a
href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
</span><b>主题<span lang=EN-US>:</span></b><span lang=EN-US> Re: </span>答复<span
lang=EN-US>: [Openstack] instance cannot access outside network</span></span><span
lang=EN-US><o:p></o:p></span></p>
</div>
<div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span
lang=EN-US>If you use VLAN, you should to be sure that your physical network
interface is configured as a a trunk interface on the Switch.<br>
<br>
On the physical switch :<br>
<br>
switchport mode trunk<br>
switchport trunk encapsulation dot1q<br>
<br>
<br>
To snif the network and see if you can see tagget packets, use :<br>
<br>
tcpdump -nnei eth1 (if eth1 is your bridge)<br>
<br>
<br>
<br>
Regards<br>
<br>
<o:p></o:p></span></p>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>On Fri, Jun 15, 2012 at 11:14 AM, David <<a
href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<o:p></o:p></span></p>
<div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Hi </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I try to add flag –routing_source_ip = 192.168.7.151 which is my
controller ip with nova-network .but it didn’t work .</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I found the console.log output error :</span><span lang=EN-US> </span><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>when Starting network...</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>udhcpc (v1.18.5) started</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Sending discover...</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Sending discover...</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Sending discover...</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>No lease, failing</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>WARN: /etc/rc3.d/S40-network failed</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I doubt that the vm on compute-node cannot find
dhcp-server or vm cannot get the response from dhcp-server</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>So I use tcpdump try to trace the dhcp request . The log as
follow :</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>First I restart network in vm . the vm will retry discovery
dhcp-server to get ip .</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>The MAC of vm is : fe:16:3e:50:6d:1c , and nova give the
ip : 192.168.4.3 to the vm ,I use (~#nova list) to find. </span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>BUT the ip didn’t associate to vm . it just in db as a record
.</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>On compute-controller :</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>On compute-node :</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>~# tcpdump -i br100 -n port 67 or 68</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>tcpdump: verbose output suppressed, use -v or -vv for full
protocol decode</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>listening on br100, link-type EN10MB (Ethernet), capture size 65535
bytes</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>01:13:46.794501 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>01:13:49.799593 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>01:13:52.803964 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>~# tcpdump -i br100 -n port 67 or 68</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>tcpdump: verbose output suppressed, use -v or -vv for full
protocol decode</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>listening on br100, link-type EN10MB (Ethernet), capture size 65535
bytes</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>01:13:47.995389 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>01:13:47.995785 IP 192.168.4.1.67 > 192.168.4.3.68:
BOOTP/DHCP, Reply, length 309</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>01:13:51.000454 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP,
Request from fa:16:3e:50:6d:1c, length 280</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>01:13:51.000911 IP 192.168.4.1.67 > 192.168.4.3.68:
BOOTP/DHCP, Reply, length 309</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>01:13:54.004840 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>01:13:54.005196 IP 192.168.4.1.67 > 192.168.4.3.68:
BOOTP/DHCP, Reply, length 309</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Could anyone tell me why ?</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
text-align:justify;text-justify:inter-ideograph'><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>David(</span></b><b><span
style='font-size:9.0pt;color:#1F497D'>李跃洲</span></b><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>)</span></b><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
text-align:justify;text-justify:inter-ideograph'><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>E-MAIL:
<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
text-align:justify;text-justify:inter-ideograph'><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> </span></b><span
lang=EN-US><o:p></o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span
style='font-size:10.0pt'>发件人<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> <a href="mailto:emilien.macchi@gmail.com"
target="_blank">emilien.macchi@gmail.com</a> [mailto:<a
href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a>]
</span><b><span style='font-size:10.0pt'>代表 </span></b><span lang=EN-US
style='font-size:10.0pt'>Emilien Macchi</span><span lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span
style='font-size:10.0pt'>发送时间<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> 2012</span><span style='font-size:10.0pt'>年<span
lang=EN-US>6</span>月<span lang=EN-US>14</span>日<span lang=EN-US> 19:03</span></span><span
lang=EN-US><o:p></o:p></span></p>
<div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span
style='font-size:10.0pt'>收件人<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> David<br>
</span><b><span style='font-size:10.0pt'>抄送<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> <<a
href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>><br>
</span><b><span style='font-size:10.0pt'>主题<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> Re: [Openstack] instance cannot access
outside network</span><span lang=EN-US><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span
lang=EN-US>Don't forget to CC the mail ;-) for the community.<br>
<br>
<br>
I think you should try to add <b>--routing_source_ip</b>=<IP of
nova-network> flag in your nova.conf.<br>
<br>
<br>
Regards,<o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>On Thu, Jun 14, 2012 at 12:51 PM, David <<a
href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I try </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>#cat /proc/sys/net/ipv4/ip_forward</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> The result is 1</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>And the iptables have wrote by nova actually .</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>As follow :</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'># Generated by iptables-save v1.4.12 on Fri Jun 15 02:58:58 2012</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>*nat</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:PREROUTING ACCEPT [774:124753]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:INPUT ACCEPT [534:94672]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:OUTPUT ACCEPT [858:54250]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:POSTROUTING ACCEPT [919:59061]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-api-OUTPUT - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-api-POSTROUTING - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-api-PREROUTING - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-api-float-snat - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-api-snat - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-network-OUTPUT - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-network-POSTROUTING - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-network-PREROUTING - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-network-float-snat - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-network-snat - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-postrouting-bottom - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A PREROUTING -j nova-network-PREROUTING</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A PREROUTING -j nova-api-PREROUTING</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A OUTPUT -j nova-network-OUTPUT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A OUTPUT -j nova-api-OUTPUT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A POSTROUTING -j nova-network-POSTROUTING</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A POSTROUTING -j nova-api-POSTROUTING</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A POSTROUTING -j nova-postrouting-bottom</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A POSTROUTING -s <a href="http://192.168.122.0/24"
target="_blank">192.168.122.0/24</a> ! -d <a href="http://192.168.122.0/24"
target="_blank">192.168.122.0/24</a> -p tcp -j MASQUERADE --to-ports 1024-65535</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A POSTROUTING -s <a href="http://192.168.122.0/24"
target="_blank">192.168.122.0/24</a> ! -d <a href="http://192.168.122.0/24"
target="_blank">192.168.122.0/24</a> -p udp -j MASQUERADE --to-ports 1024-65535</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A POSTROUTING -s <a href="http://192.168.122.0/24"
target="_blank">192.168.122.0/24</a> ! -d <a href="http://192.168.122.0/24"
target="_blank">192.168.122.0/24</a> -j MASQUERADE</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-api-snat -j nova-api-float-snat</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-network-POSTROUTING -s <a href="http://192.168.4.0/27"
target="_blank">192.168.4.0/27</a> -d <a href="http://192.168.7.151/32"
target="_blank">192.168.7.151/32</a> -j ACCEPT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-network-POSTROUTING -s <a href="http://192.168.4.0/27"
target="_blank">192.168.4.0/27</a> -d <a href="http://10.128.0.0/24-j"
target="_blank">10.128.0.0/24 -j</a> ACCEPT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-network-POSTROUTING -s <a href="http://192.168.4.0/27"
target="_blank">192.168.4.0/27</a> -d <a href="http://192.168.4.0/27-m"
target="_blank">192.168.4.0/27 -m</a> conntrack ! --ctstate DNAT -j ACCEPT</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-network-PREROUTING -d <a href="http://169.254.169.254/32"
target="_blank">169.254.169.254/32</a> -p tcp -m tcp --dport 80 -j DNAT
--to-destination <a href="http://192.168.7.151:8775" target="_blank">192.168.7.151:8775</a></span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-network-snat -j nova-network-float-snat</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-network-snat -s <a href="http://192.168.4.0/27"
target="_blank">192.168.4.0/27</a> -j SNAT --to-source 192.168.7.151</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-postrouting-bottom -j nova-network-snat</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-postrouting-bottom -j nova-api-snat</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>COMMIT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'># Completed on Fri Jun 15 02:58:58 2012</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'># Generated by iptables-save v1.4.12 on Fri Jun 15 02:58:58 2012</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>*mangle</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:PREROUTING ACCEPT [224637:108582489]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:INPUT ACCEPT [221029:107788819]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:FORWARD ACCEPT [29116:11774224]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:OUTPUT ACCEPT [187094:188512394]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:POSTROUTING ACCEPT [216210:200286618]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A POSTROUTING -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM
--checksum-fill</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>COMMIT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'># Completed on Fri Jun 15 02:58:58 2012</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'># Generated by iptables-save v1.4.12 on Fri Jun 15 02:58:58 2012</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>*filter</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:INPUT ACCEPT [91273:50201087]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:FORWARD ACCEPT [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:OUTPUT ACCEPT [84624:51049560]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-api-FORWARD - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-api-INPUT - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-api-OUTPUT - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-api-local - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-filter-top - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-network-FORWARD - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-network-INPUT - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-network-OUTPUT - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>:nova-network-local - [0:0]</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A INPUT -j nova-network-INPUT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A INPUT -j nova-api-INPUT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A FORWARD -j nova-filter-top</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A FORWARD -j nova-network-FORWARD</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A FORWARD -j nova-api-FORWARD</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A FORWARD -i virbr0 -o virbr0 -j ACCEPT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A FORWARD -o virbr0 -j REJECT --reject-with
icmp-port-unreachable</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A FORWARD -i virbr0 -j REJECT --reject-with
icmp-port-unreachable</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A OUTPUT -j nova-filter-top</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A OUTPUT -j nova-network-OUTPUT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A OUTPUT -j nova-api-OUTPUT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-api-INPUT -d <a href="http://192.168.7.151/32"
target="_blank">192.168.7.151/32</a> -p tcp -m tcp --dport 8775 -j ACCEPT</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-filter-top -j nova-network-local</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-filter-top -j nova-api-local</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-network-FORWARD -i br100 -j ACCEPT</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-A nova-network-FORWARD -o br100 -j ACCEPT</span><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'>COMMIT</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'># Completed on Fri Jun 15 02:58:58 2012</span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
text-align:justify;text-justify:inter-ideograph'><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Best
Regards</span></b><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
text-align:justify;text-justify:inter-ideograph'><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>David(</span></b><b><span
style='font-size:9.0pt;color:#1F497D'>李跃洲</span></b><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>)</span></b><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;
text-align:justify;text-justify:inter-ideograph'><b><span lang=EN-US
style='font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>E-MAIL:
<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.5pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span lang=EN-US><o:p></o:p></span></p>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span
style='font-size:10.0pt'>发件人<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> <a href="mailto:emilien.macchi@gmail.com"
target="_blank">emilien.macchi@gmail.com</a> [mailto:<a
href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a>]
</span><b><span style='font-size:10.0pt'>代表 </span></b><span lang=EN-US
style='font-size:10.0pt'>Emilien Macchi<br>
</span><b><span style='font-size:10.0pt'>发送时间<span lang=EN-US>:</span></span></b><span
lang=EN-US style='font-size:10.0pt'> 2012</span><span style='font-size:10.0pt'>年<span
lang=EN-US>6</span>月<span lang=EN-US>14</span>日<span lang=EN-US> 16:51<br>
</span><b>收件人<span lang=EN-US>:</span></b><span lang=EN-US> David<br>
</span><b>抄送<span lang=EN-US>:</span></b><span lang=EN-US> <a
href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
</span><b>主题<span lang=EN-US>:</span></b><span lang=EN-US> Re: [Openstack]
instance cannot access outside network</span></span><span lang=EN-US><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span
lang=EN-US>Hi,<br>
<br>
Can you try :<br>
<br>
<b>echo 1 > /proc/sys/net/<i>ipv4</i>/ip_forward</b> on the nova-network
node.<br>
<br>
And also modify <b>/etc/sysctl.conf</b> to uncomment the ip_forward parameter :<br>
<br>
<b>net.ipv4.ip_forward = 1</b><br>
<br>
<br>
Is it ok now ?<br>
<br>
<br>
Regards<o:p></o:p></span></p>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>On Thu, Jun 14, 2012 at 10:24 AM, David <<a
href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<o:p></o:p></span></p>
<div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>Hi All<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>I try to install openstack on multi-node . <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>I can boot instance and use vnc console to visit the instance .<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>But , I cannot access outside in instance .<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>I found the fixed ip range didn’t put on the br100 at compute-node
only on compute-controller. The compute-node only install nova-compute<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>On compute-node , ip addr<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state
UNKNOWN <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet <a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>
scope host lo<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet6 ::1/128 scope host <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> valid_lft forever preferred_lft
forever<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast master br100 state UP qlen 1000<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> link/ether 00:0c:29:cf:ec:d7 brd
ff:ff:ff:ff:ff:ff<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast state UP qlen 1000<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> link/ether 00:0c:29:cf:ec:e1 brd
ff:ff:ff:ff:ff:ff<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet <a href="http://192.168.7.153/27"
target="_blank">192.168.7.153/27</a> brd 192.168.7.159 scope global eth1<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet6 fe80::20c:29ff:fecf:ece1/64 scope link <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> valid_lft forever preferred_lft
forever<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>4: br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UP <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> link/ether 00:0c:29:cf:ec:d7 brd
ff:ff:ff:ff:ff:ff<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet6 fe80::20c:29ff:fecf:ecd7/64 scope link <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> valid_lft forever preferred_lft
forever<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>on compute-controller :<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state
UNKNOWN <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> link/loopback 00:00:00:00:00:00 brd
00:00:00:00:00:00<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet <a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>
scope host lo<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet <a href="http://169.254.169.254/32"
target="_blank">169.254.169.254/32</a> scope link lo<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet6 ::1/128 scope host <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> valid_lft forever preferred_lft
forever<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast master br100 state UP qlen 1000<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> link/ether 00:0c:29:88:31:51 brd
ff:ff:ff:ff:ff:ff<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast state UP qlen 1000<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> link/ether 00:0c:29:88:31:5b brd
ff:ff:ff:ff:ff:ff<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet <a href="http://192.168.7.151/27"
target="_blank">192.168.7.151/27</a> brd 192.168.7.159 scope global eth1<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet6 fe80::20c:29ff:fe88:315b/64 scope link <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> valid_lft forever preferred_lft
forever<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>4: br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UP <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> link/ether 00:0c:29:88:31:51 brd
ff:ff:ff:ff:ff:ff<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet <a href="http://10.0.0.3/27" target="_blank">10.0.0.3/27</a>
brd 10.0.0.31 scope global br100<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet <a href="http://192.168.4.33/27"
target="_blank">192.168.4.33/27</a> brd 192.168.4.63 scope global br100<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> inet6 fe80::20c:29ff:fe88:3151/64 scope link <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> valid_lft forever preferred_lft
forever<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>could Any one tell me why ? Or tell me how openstack set network
bridge on compute-node so that I can figure out what happened .<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>My nova.conf :<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--dhcpbridge_flagfile=/etc/nova/nova.conf<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--dhcpbridge=/usr/bin/nova-dhcpbridge<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--logdir=/var/log/nova<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--state_path=/var/lib/nova<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--lock_path=/run/lock/nova<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--allow_admin_api=true<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--use_deprecated_auth=false<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--auth_strategy=keystone<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--scheduler_driver=nova.scheduler.simple.SimpleScheduler<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--s3_host=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--ec2_host=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--rabbit_host=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--cc_host=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--nova_url=<a href="http://192.168.7.151:8774/v1.1/" target="_blank">http://192.168.7.151:8774/v1.1/</a><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--routing_source_ip=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--glance_api_servers=<a href="http://192.168.7.151:9292"
target="_blank">192.168.7.151:9292</a><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--image_service=nova.image.glance.GlanceImageService<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--iscsi_ip_prefix=192.168.4<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--sql_connection=mysql://<a
href="http://root:hisoft@192.168.7.151/nova" target="_blank">root:hisoft@192.168.7.151/nova</a><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--ec2_url=<a href="http://192.168.7.151:8773/services/Cloud"
target="_blank">http://192.168.7.151:8773/services/Cloud</a><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--keystone_ec2_url=<a href="http://192.168.7.151:5000/v2.0/ec2tokens"
target="_blank">http://192.168.7.151:5000/v2.0/ec2tokens</a><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--api_paste_config=/etc/nova/api-paste.ini<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--libvirt_type=qemu<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--libvirt_use_virtio_for_bridges=true<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--start_guests_on_host_boot=true<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--resume_guests_state_on_host_boot=true<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US># vnc specific configuration<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--novnc_enabled=true<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--novncproxy_base_url=<a
href="http://192.168.7.151:6080/vnc_auto.html" target="_blank">http://192.168.7.151:6080/vnc_auto.html</a><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--vncserver_proxyclient_address=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--vncserver_listen=192.168.7.151<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US># network specific settings<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--network_manager=nova.network.manager.FlatDHCPManager<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--public_interface=eth1<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--flat_network_bridge=br100<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--fixed_range=<a href="http://192.168.4.1/27" target="_blank">192.168.4.1/27</a><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--floating_range=<a href="http://192.168.7.208/28" target="_blank">192.168.7.208/28</a><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--network_size=32<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--flat_network_dhcp_start=192.168.4.33<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--flat_injected=False<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--force_dhcp_release<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--iscsi_helper=tgtadm<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--connection_type=libvirt<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--root_helper=sudo nova-rootwrap<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>--verbose<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>And nova version :<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>#nova-manage version<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>2012.1 (2012.1-LOCALBRANCH:LOCALREVISION)<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US>Thank you in advance .<o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span
lang=EN-US style='font-size:9.0pt;color:#1F497D'>David(</span>李跃洲</b><b><span
lang=EN-US style='font-size:9.0pt;color:#1F497D'>)</span></b><span lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><span
lang=EN-US style='font-size:9.0pt;color:#1F497D'>E-MAIL: <a
href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span
lang=EN-US><o:p></o:p></span></p>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:12.0pt'><span
lang=EN-US><br>
_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net"
target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><o:p></o:p></span></p>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US><br>
<br clear=all>
<br>
-- <o:p></o:p></span></p>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888'>Emilien
Macchi</span><span lang=ES style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#888888'><br>
<b>SysAdmin (Intern)</b></span><span lang=EN-US style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:#888888'><br>
<b><a href="http://www.stackops.com/" target="_blank">www.stackops.com</a></b>
|</span><span lang=EN-US style='font-size:7.5pt;font-family:"Arial","sans-serif";
color:#888888'> <a href="mailto:emilien.macchi@stackops.com" target="_blank">emilien.macchi@stackops.com</a></span><span
lang=EN-US><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<p><span style='font-size:10.0pt;color:#004438'>错误！未指定文件名。</span><span
lang=EN-US><o:p></o:p></span></p>
</div>
<div>
<div>
<p><span lang=EN-US style='font-size:7.5pt;font-family:"Arial","sans-serif"'>********************
ADVERTENCIA LEGAL ******************** <br>
Le informamos, como destinatario de este mensaje, que el correo electrónico y
las comunicaciones por medio de Internet no permiten asegurar ni garantizar la confidencialidad
de los mensajes transmitidos, así como tampoco su integridad o su correcta
recepción, por lo que STACKOPS TECHNOLOGIES S.L. no asume responsabilidad
alguna por tales circunstancias. Si no consintiese en la utilización del correo
electrónico o de las comunicaciones vía Internet le rogamos nos lo comunique y
ponga en nuestro conocimiento de manera inmediata. Este mensaje va dirigido, de
manera exclusiva, a su destinatario y contiene información confidencial y
sujeta al secreto profesional, cuya divulgación no está permitida por la ley.
En caso de haber recibido este mensaje por error, le rogamos que, de forma
inmediata, nos lo comunique mediante correo electrónico remitido a nuestra
atención y proceda a su eliminación, así como a la de cualquier documento
adjunto al mismo. Asimismo, le comunicamos que la distribución, copia o
utilización de este mensaje, o de cualquier documento adjunto al mismo,
cualquiera que fuera su finalidad, están prohibidas por la ley. <br>
<br>
***************** PRIVILEGED AND CONFIDENTIAL **************** <br>
We hereby inform you, as addressee of this message, that e-mail and Internet do
not guarantee the confidentiality, nor the completeness or proper reception of
the messages sent and, thus, STACKOPS TECHNOLOGIES S.L. does not assume any
liability for those circumstances. Should you not agree to the use of e-mail or
to communications via Internet, you are kindly requested to notify us
immediately. This message is intended exclusively for the person to whom it is
addressed and contains privileged and confidential information protected from
disclosure by law. If you are not the addressee indicated in this message, you
should immediately delete it and any attachments and notify the sender by reply
e-mail. In such case, you are hereby notified that any dissemination,
distribution, copying or use of this message or any attachments, for any
purpose, is strictly prohibited by law.</span><span lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US><br>
<br clear=all>
<br>
-- <o:p></o:p></span></p>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888'>Emilien
Macchi</span><span lang=ES style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#888888'><br>
<b>SysAdmin (Intern)</b></span><span lang=EN-US style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:#888888'><br>
<b><a href="http://www.stackops.com/" target="_blank">www.stackops.com</a></b>
|</span><span lang=EN-US style='font-size:7.5pt;font-family:"Arial","sans-serif";
color:#888888'> <a href="mailto:emilien.macchi@stackops.com" target="_blank">emilien.macchi@stackops.com</a></span><span
lang=EN-US><o:p></o:p></span></p>
</div>
<div>
<p><span style='font-size:10.0pt;color:#004438'>错误！未指定文件名。</span><span
lang=EN-US><o:p></o:p></span></p>
</div>
<div>
<p><span lang=EN-US style='font-size:7.5pt;font-family:"Arial","sans-serif"'>********************
ADVERTENCIA LEGAL ******************** <br>
Le informamos, como destinatario de este mensaje, que el correo electrónico y las
comunicaciones por medio de Internet no permiten asegurar ni garantizar la
confidencialidad de los mensajes transmitidos, así como tampoco su integridad o
su correcta recepción, por lo que STACKOPS TECHNOLOGIES S.L. no asume
responsabilidad alguna por tales circunstancias. Si no consintiese en la
utilización del correo electrónico o de las comunicaciones vía Internet le
rogamos nos lo comunique y ponga en nuestro conocimiento de manera inmediata.
Este mensaje va dirigido, de manera exclusiva, a su destinatario y contiene
información confidencial y sujeta al secreto profesional, cuya divulgación no
está permitida por la ley. En caso de haber recibido este mensaje por error, le
rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico remitido
a nuestra atención y proceda a su eliminación, así como a la de cualquier
documento adjunto al mismo. Asimismo, le comunicamos que la distribución, copia
o utilización de este mensaje, o de cualquier documento adjunto al mismo,
cualquiera que fuera su finalidad, están prohibidas por la ley. <br>
<br>
***************** PRIVILEGED AND CONFIDENTIAL **************** <br>
We hereby inform you, as addressee of this message, that e-mail and Internet do
not guarantee the confidentiality, nor the completeness or proper reception of
the messages sent and, thus, STACKOPS TECHNOLOGIES S.L. does not assume any
liability for those circumstances. Should you not agree to the use of e-mail or
to communications via Internet, you are kindly requested to notify us
immediately. This message is intended exclusively for the person to whom it is
addressed and contains privileged and confidential information protected from
disclosure by law. If you are not the addressee indicated in this message, you
should immediately delete it and any attachments and notify the sender by reply
e-mail. In such case, you are hereby notified that any dissemination,
distribution, copying or use of this message or any attachments, for any
purpose, is strictly prohibited by law.</span><span lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US><br>
<br clear=all>
<br>
-- <o:p></o:p></span></p>
<div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US style='font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888'>Emilien
Macchi</span><span lang=ES style='font-size:10.0pt;font-family:"Arial","sans-serif";
color:#888888'><br>
<b>SysAdmin (Intern)</b></span><span lang=EN-US style='font-size:10.0pt;
font-family:"Arial","sans-serif";color:#888888'><br>
<b><a href="http://www.stackops.com/" target="_blank">www.stackops.com</a></b>
|</span><span lang=EN-US style='font-size:7.5pt;font-family:"Arial","sans-serif";
color:#888888'> <a href="mailto:emilien.macchi@stackops.com" target="_blank">emilien.macchi@stackops.com</a></span><span
lang=EN-US><o:p></o:p></span></p>
</div>
<div>
<p><span style='font-size:10.0pt;color:#004438'>错误！未指定文件名。</span><span
lang=EN-US><o:p></o:p></span></p>
</div>
<div>
<p><span lang=EN-US style='font-size:7.5pt;font-family:"Arial","sans-serif"'>********************
ADVERTENCIA LEGAL ******************** <br>
Le informamos, como destinatario de este mensaje, que el correo electrónico y
las comunicaciones por medio de Internet no permiten asegurar ni garantizar la
confidencialidad de los mensajes transmitidos, así como tampoco su integridad o
su correcta recepción, por lo que STACKOPS TECHNOLOGIES S.L. no asume
responsabilidad alguna por tales circunstancias. Si no consintiese en la
utilización del correo electrónico o de las comunicaciones vía Internet le
rogamos nos lo comunique y ponga en nuestro conocimiento de manera inmediata.
Este mensaje va dirigido, de manera exclusiva, a su destinatario y contiene
información confidencial y sujeta al secreto profesional, cuya divulgación no
está permitida por la ley. En caso de haber recibido este mensaje por error, le
rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico
remitido a nuestra atención y proceda a su eliminación, así como a la de
cualquier documento adjunto al mismo. Asimismo, le comunicamos que la
distribución, copia o utilización de este mensaje, o de cualquier documento
adjunto al mismo, cualquiera que fuera su finalidad, están prohibidas por la
ley. <br>
<br>
***************** PRIVILEGED AND CONFIDENTIAL **************** <br>
We hereby inform you, as addressee of this message, that e-mail and Internet do
not guarantee the confidentiality, nor the completeness or proper reception of
the messages sent and, thus, STACKOPS TECHNOLOGIES S.L. does not assume any
liability for those circumstances. Should you not agree to the use of e-mail or
to communications via Internet, you are kindly requested to notify us
immediately. This message is intended exclusively for the person to whom it is
addressed and contains privileged and confidential information protected from
disclosure by law. If you are not the addressee indicated in this message, you
should immediately delete it and any attachments and notify the sender by reply
e-mail. In such case, you are hereby notified that any dissemination, distribution,
copying or use of this message or any attachments, for any purpose, is strictly
prohibited by law.</span><span lang=EN-US><o:p></o:p></span></p>
</div>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span
lang=EN-US> <o:p></o:p></span></p>
</div>
</div>
</div>
</div>
<p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US><br>
_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><o:p></o:p></span></p>
</div>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
</div>
</div>
</body>
</html>