If you use VLAN, you should to be sure that your physical network interface is configured as a a trunk interface on the Switch.<br><br>On the physical switch :<br><br>switchport mode trunk<br>switchport trunk encapsulation dot1q<br>
<br><br>To snif the network and see if you can see tagget packets, use :<br><br> tcpdump -nnei eth1 (if eth1 is your bridge)<br><br><br><br>Regards<br><br><br><br><div class="gmail_quote">On Fri, Jun 15, 2012 at 11:14 AM, David <span dir="ltr"><<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="ZH-CN">
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">Hi <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">I try to add flag –routing_source_ip = 192.168.7.151 which is my
controller ip with nova-network .but it didn’t work .<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">I found the console.log output error :</span><span lang="EN-US"> </span><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">when Starting network...<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">udhcpc (v1.18.5) started<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">Sending discover...<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">Sending discover...<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">Sending discover...<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">No lease, failing<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">WARN: /etc/rc3.d/S40-network failed<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">I doubt that the vm on compute-node cannot find dhcp-server or
vm cannot get the response from dhcp-server<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">So I use tcpdump try to trace the dhcp request . The log as
follow :<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">First I restart network in vm . the vm will retry discovery dhcp-server
to get ip .<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">The MAC of vm is : fe:16:3e:50:6d:1c , and nova give the ip : 192.168.4.3
to the vm ,I use (~#nova list) to find. <u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">BUT the ip didn’t associate to vm . it just in db as a record .<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">On compute-controller :<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">On compute-node :<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">~# tcpdump -i br100 -n port 67 or 68<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">tcpdump: verbose output suppressed, use -v or -vv for full
protocol decode<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">listening on br100, link-type EN10MB (Ethernet), capture size
65535 bytes<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">01:13:46.794501 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">01:13:49.799593 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">01:13:52.803964 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">~# tcpdump -i br100 -n port 67 or 68<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">tcpdump: verbose output suppressed, use -v or -vv for full
protocol decode<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">listening on br100, link-type EN10MB (Ethernet), capture size
65535 bytes<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">01:13:47.995389 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">01:13:47.995785 IP 192.168.4.1.67 > 192.168.4.3.68:
BOOTP/DHCP, Reply, length 309<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">01:13:51.000454 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP,
Request from fa:16:3e:50:6d:1c, length 280<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">01:13:51.000911 IP 192.168.4.1.67 > 192.168.4.3.68:
BOOTP/DHCP, Reply, length 309<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">01:13:54.004840 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">01:13:54.005196 IP 192.168.4.1.67 > 192.168.4.3.68:
BOOTP/DHCP, Reply, length 309<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">Could anyone tell me why ?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">David(</span></b><b><span style="font-size:9.0pt;color:#1f497d">李跃洲</span></b><b><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">)<u></u><u></u></span></b></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">E-MAIL: <a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a><u></u><u></u></span></b></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></b></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"></p><div class="im"><b><span style="font-size:10.0pt">发件人<span lang="EN-US">:</span></span></b><span style="font-size:10.0pt" lang="EN-US"> <a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a>
[mailto:<a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a>] </span><b><span style="font-size:10.0pt">代表 </span></b><span style="font-size:10.0pt" lang="EN-US">Emilien Macchi<br>
</span></div><b><span style="font-size:10.0pt">发送时间<span lang="EN-US">:</span></span></b><span style="font-size:10.0pt" lang="EN-US"> 2012</span><span style="font-size:10.0pt">年<span lang="EN-US">6</span>月<span lang="EN-US">14</span>日<span lang="EN-US"> 19:03<br>
</span><div><div class="h5"><b>收件人<span lang="EN-US">:</span></b><span lang="EN-US"> David<br>
</span><b>抄送<span lang="EN-US">:</span></b><span lang="EN-US">
<<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>><br>
</span><b>主题<span lang="EN-US">:</span></b><span lang="EN-US"> Re: [Openstack]
instance cannot access outside network<u></u><u></u></span></div></div></span><p></p>
</div><div><div class="h5">
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US">Don't forget
to CC the mail ;-) for the community.<br>
<br>
<br>
I think you should try to add <b>--routing_source_ip</b>=<IP of
nova-network> flag in your nova.conf.<br>
<br>
<br>
Regards,<br>
<br>
<u></u><u></u></span></p>
</div></div><div><div><div class="h5">
<p class="MsoNormal"><span lang="EN-US">On Thu, Jun 14, 2012 at 12:51 PM, David
<<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<u></u><u></u></span></p>
</div></div><div>
<div><div><div class="h5">
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">I try </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">#cat /proc/sys/net/ipv4/ip_forward</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"> The result is 1</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">And the iptables have wrote by nova actually .</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">As follow :</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"># Generated by iptables-save v1.4.12 on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">*nat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:PREROUTING ACCEPT [774:124753]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:INPUT ACCEPT [534:94672]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:OUTPUT ACCEPT [858:54250]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:POSTROUTING ACCEPT [919:59061]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-api-OUTPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-api-POSTROUTING - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-api-PREROUTING - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-api-float-snat - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-api-snat - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-network-OUTPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-network-POSTROUTING - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-network-PREROUTING - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-network-float-snat - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-network-snat - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-postrouting-bottom - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A PREROUTING -j nova-network-PREROUTING</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A PREROUTING -j nova-api-PREROUTING</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A OUTPUT -j nova-network-OUTPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A OUTPUT -j nova-api-OUTPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A POSTROUTING -j nova-network-POSTROUTING</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A POSTROUTING -j nova-api-POSTROUTING</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A POSTROUTING -j nova-postrouting-bottom</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A POSTROUTING -s <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> ! -d <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> -p tcp -j MASQUERADE --to-ports 1024-65535</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A POSTROUTING -s <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> ! -d <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> -p udp -j MASQUERADE --to-ports 1024-65535</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A POSTROUTING -s <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> ! -d <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> -j MASQUERADE</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-api-snat -j nova-api-float-snat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-network-POSTROUTING -s <a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a> -d <a href="http://192.168.7.151/32" target="_blank">192.168.7.151/32</a> -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-network-POSTROUTING -s <a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a> -d <a href="http://10.128.0.0/24-j" target="_blank">10.128.0.0/24 -j</a> ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-network-POSTROUTING -s <a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a> -d <a href="http://192.168.4.0/27-m" target="_blank">192.168.4.0/27 -m</a> conntrack ! --ctstate DNAT -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-network-PREROUTING -d <a href="http://169.254.169.254/32" target="_blank">169.254.169.254/32</a> -p tcp -m tcp --dport 80 -j DNAT
--to-destination <a href="http://192.168.7.151:8775" target="_blank">192.168.7.151:8775</a></span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-network-snat -j nova-network-float-snat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-network-snat -s <a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a> -j SNAT --to-source 192.168.7.151</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-postrouting-bottom -j nova-network-snat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-postrouting-bottom -j nova-api-snat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">COMMIT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"># Completed on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"># Generated by iptables-save v1.4.12 on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">*mangle</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:PREROUTING ACCEPT [224637:108582489]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:INPUT ACCEPT [221029:107788819]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:FORWARD ACCEPT [29116:11774224]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:OUTPUT ACCEPT [187094:188512394]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:POSTROUTING ACCEPT [216210:200286618]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A POSTROUTING -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM
--checksum-fill</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">COMMIT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"># Completed on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"># Generated by iptables-save v1.4.12 on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">*filter</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:INPUT ACCEPT [91273:50201087]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:FORWARD ACCEPT [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:OUTPUT ACCEPT [84624:51049560]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-api-FORWARD - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-api-INPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-api-OUTPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-api-local - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-filter-top - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-network-FORWARD - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-network-INPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-network-OUTPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">:nova-network-local - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A INPUT -j nova-network-INPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A INPUT -j nova-api-INPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A FORWARD -j nova-filter-top</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A FORWARD -j nova-network-FORWARD</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A FORWARD -j nova-api-FORWARD</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A FORWARD -i virbr0 -o virbr0 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A FORWARD -o virbr0 -j REJECT --reject-with
icmp-port-unreachable</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A FORWARD -i virbr0 -j REJECT --reject-with
icmp-port-unreachable</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A OUTPUT -j nova-filter-top</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A OUTPUT -j nova-network-OUTPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A OUTPUT -j nova-api-OUTPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-api-INPUT -d <a href="http://192.168.7.151/32" target="_blank">192.168.7.151/32</a> -p tcp -m tcp --dport 8775 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-filter-top -j nova-network-local</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-filter-top -j nova-api-local</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-network-FORWARD -i br100 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">-A nova-network-FORWARD -o br100 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">COMMIT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"># Completed on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">Best
Regards</span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">David(</span></b><b><span style="font-size:9.0pt;color:#1f497d">李跃洲</span></b><b><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">)</span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">E-MAIL:
<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"> </span><span lang="EN-US"><u></u><u></u></span></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt">发件人<span lang="EN-US">:</span></span></b><span style="font-size:10.0pt" lang="EN-US"> <a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a> [mailto:<a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a>]
</span><b><span style="font-size:10.0pt">代表 </span></b><span style="font-size:10.0pt" lang="EN-US">Emilien Macchi<br>
</span><b><span style="font-size:10.0pt">发送时间<span lang="EN-US">:</span></span></b><span style="font-size:10.0pt" lang="EN-US"> 2012</span><span style="font-size:10.0pt">年<span lang="EN-US">6</span>月<span lang="EN-US">14</span>日<span lang="EN-US"> 16:51<br>
</span><b>收件人<span lang="EN-US">:</span></b><span lang="EN-US"> David<br>
</span><b>抄送<span lang="EN-US">:</span></b><span lang="EN-US"> <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
</span><b>主题<span lang="EN-US">:</span></b><span lang="EN-US"> Re: [Openstack]
instance cannot access outside network</span></span><span lang="EN-US"><u></u><u></u></span></p>
</div>
</div></div><div>
<div><div><div class="h5">
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US">Hi,<br>
<br>
Can you try :<br>
<br>
<b>echo 1 > /proc/sys/net/<i>ipv4</i>/ip_forward</b> on the nova-network
node.<br>
<br>
And also modify <b>/etc/sysctl.conf</b> to uncomment the ip_forward parameter :<br>
<br>
<b>net.ipv4.ip_forward = 1</b><br>
<br>
<br>
Is it ok now ?<br>
<br>
<br>
Regards<u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US">On Thu, Jun 14, 2012 at 10:24 AM, David <<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<u></u><u></u></span></p>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US">Hi All<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">I try to install openstack on multi-node . <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">I can boot instance and use vnc console to visit the instance .<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">But , I cannot access outside in instance .<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">I found the fixed ip range didn’t put on the br100 at compute-node
only on compute-controller. The compute-node only install nova-compute<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">On compute-node , ip addr<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state
UNKNOWN <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/loopback 00:00:00:00:00:00 brd
00:00:00:00:00:00<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>
scope host lo<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 ::1/128 scope host <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast master br100 state UP qlen 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:cf:ec:d7 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast state UP qlen 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:cf:ec:e1 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://192.168.7.153/27" target="_blank">192.168.7.153/27</a> brd 192.168.7.159 scope global eth1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 fe80::20c:29ff:fecf:ece1/64 scope link <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">4: br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UP <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:cf:ec:d7 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 fe80::20c:29ff:fecf:ecd7/64 scope link <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">on compute-controller :<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state
UNKNOWN <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/loopback 00:00:00:00:00:00 brd
00:00:00:00:00:00<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>
scope host lo<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://169.254.169.254/32" target="_blank">169.254.169.254/32</a> scope link lo<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 ::1/128 scope host <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast master br100 state UP qlen 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:88:31:51 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast state UP qlen 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:88:31:5b brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://192.168.7.151/27" target="_blank">192.168.7.151/27</a> brd 192.168.7.159 scope global eth1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 fe80::20c:29ff:fe88:315b/64 scope link <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">4: br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UP <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:88:31:51 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://10.0.0.3/27" target="_blank">10.0.0.3/27</a>
brd 10.0.0.31 scope global br100<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://192.168.4.33/27" target="_blank">192.168.4.33/27</a> brd 192.168.4.63 scope global br100<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 fe80::20c:29ff:fe88:3151/64 scope link <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">could Any one tell me why ? Or tell me how openstack set network
bridge on compute-node so that I can figure out what happened .<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">My nova.conf :<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--dhcpbridge_flagfile=/etc/nova/nova.conf<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--dhcpbridge=/usr/bin/nova-dhcpbridge<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--logdir=/var/log/nova<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--state_path=/var/lib/nova<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--lock_path=/run/lock/nova<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--allow_admin_api=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--use_deprecated_auth=false<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--auth_strategy=keystone<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--scheduler_driver=nova.scheduler.simple.SimpleScheduler<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--s3_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--ec2_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--rabbit_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--cc_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--nova_url=<a href="http://192.168.7.151:8774/v1.1/" target="_blank">http://192.168.7.151:8774/v1.1/</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--routing_source_ip=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--glance_api_servers=<a href="http://192.168.7.151:9292" target="_blank">192.168.7.151:9292</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--image_service=nova.image.glance.GlanceImageService<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--iscsi_ip_prefix=192.168.4<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--sql_connection=mysql://<a href="http://root:hisoft@192.168.7.151/nova" target="_blank">root:hisoft@192.168.7.151/nova</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--ec2_url=<a href="http://192.168.7.151:8773/services/Cloud" target="_blank">http://192.168.7.151:8773/services/Cloud</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--keystone_ec2_url=<a href="http://192.168.7.151:5000/v2.0/ec2tokens" target="_blank">http://192.168.7.151:5000/v2.0/ec2tokens</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--api_paste_config=/etc/nova/api-paste.ini<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--libvirt_type=qemu<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--libvirt_use_virtio_for_bridges=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--start_guests_on_host_boot=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--resume_guests_state_on_host_boot=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"># vnc specific configuration<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--novnc_enabled=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--novncproxy_base_url=<a href="http://192.168.7.151:6080/vnc_auto.html" target="_blank">http://192.168.7.151:6080/vnc_auto.html</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--vncserver_proxyclient_address=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--vncserver_listen=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"># network specific settings<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--network_manager=nova.network.manager.FlatDHCPManager<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--public_interface=eth1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--flat_network_bridge=br100<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--fixed_range=<a href="http://192.168.4.1/27" target="_blank">192.168.4.1/27</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--floating_range=<a href="http://192.168.7.208/28" target="_blank">192.168.7.208/28</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--network_size=32<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--flat_network_dhcp_start=192.168.4.33<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--flat_injected=False<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--force_dhcp_release<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--iscsi_helper=tgtadm<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--connection_type=libvirt<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--root_helper=sudo nova-rootwrap<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--verbose<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">And nova version :<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">#nova-manage version<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2012.1 (2012.1-LOCALBRANCH:LOCALREVISION)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Thank you in advance .<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;color:#1f497d" lang="EN-US">David(</span>李跃洲</b><b><span style="font-size:9.0pt;color:#1f497d" lang="EN-US">)</span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:9.0pt;color:#1f497d" lang="EN-US">E-MAIL: <a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US"><br>
_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US"><br>
<br clear="all">
<br>
-- <u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888" lang="EN-US">Emilien
Macchi</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888" lang="ES"><br>
<b>SysAdmin (Intern)</b></span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888" lang="EN-US"><br>
<b><a href="http://www.stackops.com/" target="_blank">www.stackops.com</a></b>
|</span><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#888888" lang="EN-US"> <a href="mailto:emilien.macchi@stackops.com" target="_blank">emilien.macchi@stackops.com</a></span><span lang="EN-US"><u></u><u></u></span></p>
</div>
</div></div><div>
<p><span style="font-size:10.0pt;color:#004438">错误！未指定文件名。</span><span lang="EN-US"><u></u><u></u></span></p>
</div><div class="im">
<div>
<p><span style="font-size:7.5pt;font-family:"Arial","sans-serif"" lang="EN-US">********************
ADVERTENCIA LEGAL ******************** <br>
Le informamos, como destinatario de este mensaje, que el correo electrónico y las
comunicaciones por medio de Internet no permiten asegurar ni garantizar la
confidencialidad de los mensajes transmitidos, así como tampoco su integridad o
su correcta recepción, por lo que STACKOPS TECHNOLOGIES S.L. no asume
responsabilidad alguna por tales circunstancias. Si no consintiese en la
utilización del correo electrónico o de las comunicaciones vía Internet le
rogamos nos lo comunique y ponga en nuestro conocimiento de manera inmediata.
Este mensaje va dirigido, de manera exclusiva, a su destinatario y contiene
información confidencial y sujeta al secreto profesional, cuya divulgación no
está permitida por la ley. En caso de haber recibido este mensaje por error, le
rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico remitido
a nuestra atención y proceda a su eliminación, así como a la de cualquier
documento adjunto al mismo. Asimismo, le comunicamos que la distribución, copia
o utilización de este mensaje, o de cualquier documento adjunto al mismo,
cualquiera que fuera su finalidad, están prohibidas por la ley. <br>
<br>
***************** PRIVILEGED AND CONFIDENTIAL **************** <br>
We hereby inform you, as addressee of this message, that e-mail and Internet do
not guarantee the confidentiality, nor the completeness or proper reception of
the messages sent and, thus, STACKOPS TECHNOLOGIES S.L. does not assume any
liability for those circumstances. Should you not agree to the use of e-mail or
to communications via Internet, you are kindly requested to notify us
immediately. This message is intended exclusively for the person to whom it is
addressed and contains privileged and confidential information protected from
disclosure by law. If you are not the addressee indicated in this message, you
should immediately delete it and any attachments and notify the sender by reply
e-mail. In such case, you are hereby notified that any dissemination,
distribution, copying or use of this message or any attachments, for any
purpose, is strictly prohibited by law.</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
</div></div>
</div>
</div>
</div>
</div><div class="im">
<p class="MsoNormal"><span lang="EN-US"><br>
<br clear="all">
<br>
-- </span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888" lang="EN-US"><u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888" lang="EN-US">Emilien Macchi</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888" lang="ES"><br>
<b>SysAdmin (Intern)</b></span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888" lang="EN-US"><br>
<b><a href="http://www.stackops.com/" target="_blank">www.stackops.com</a></b>
|</span><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#888888" lang="EN-US"> <a href="mailto:emilien.macchi@stackops.com" target="_blank">emilien.macchi@stackops.com</a></span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888" lang="EN-US"><u></u><u></u></span></p>
</div>
<div>
<p><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#004438" lang="EN-GB"><img src="" border="0"></span></b><b><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#004438" lang="EN-US"><u></u><u></u></span></b></p>
</div>
<div>
<p><span style="font-size:7.5pt;font-family:"Arial","sans-serif"" lang="EN-US">******************** ADVERTENCIA LEGAL ******************** <br>
Le informamos, como destinatario de este mensaje, que el correo electrónico y
las comunicaciones por medio de Internet no permiten asegurar ni garantizar la
confidencialidad de los mensajes transmitidos, así como tampoco su integridad o
su correcta recepción, por lo que STACKOPS TECHNOLOGIES S.L. no asume
responsabilidad alguna por tales circunstancias. Si no consintiese en la utilización
del correo electrónico o de las comunicaciones vía Internet le rogamos nos lo
comunique y ponga en nuestro conocimiento de manera inmediata. Este mensaje va
dirigido, de manera exclusiva, a su destinatario y contiene información
confidencial y sujeta al secreto profesional, cuya divulgación no está
permitida por la ley. En caso de haber recibido este mensaje por error, le
rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico
remitido a nuestra atención y proceda a su eliminación, así como a la de
cualquier documento adjunto al mismo. Asimismo, le comunicamos que la
distribución, copia o utilización de este mensaje, o de cualquier documento
adjunto al mismo, cualquiera que fuera su finalidad, están prohibidas por la
ley. <br>
<br>
***************** PRIVILEGED AND CONFIDENTIAL **************** <br>
We hereby inform you, as addressee of this message, that e-mail and Internet do
not guarantee the confidentiality, nor the completeness or proper reception of
the messages sent and, thus, STACKOPS TECHNOLOGIES S.L. does not assume any
liability for those circumstances. Should you not agree to the use of e-mail or
to communications via Internet, you are kindly requested to notify us
immediately. This message is intended exclusively for the person to whom it is
addressed and contains privileged and confidential information protected from
disclosure by law. If you are not the addressee indicated in this message, you
should immediately delete it and any attachments and notify the sender by reply
e-mail. In such case, you are hereby notified that any dissemination,
distribution, copying or use of this message or any attachments, for any
purpose, is strictly prohibited by law.</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888" lang="EN-US"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
</div></div>
</div>
</blockquote></div><br><br clear="all"><br>-- <br><font color="#888888"><span style="line-height:normal;text-indent:0px;border-collapse:separate;letter-spacing:normal;font-variant:normal;text-transform:none;font-size:medium;font-style:normal;white-space:normal;font-family:Times;word-spacing:0px"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><div align="left">
<div>Emilien Macchi<font><span style="font-family:Arial" lang="ES"><br><font><font face="Arial"><b>SysAdmin (Intern)</b></font></font></span></font><br>
<b><font style="font-family:arial,helvetica,sans-serif" face="Arial" size="2"><a href="http://www.stackops.com/" target="_blank"><b>www.stackops.com</b></a></font></b><font><font face="Arial"> </font></font><font color="#888888"><span style="line-height:normal;text-indent:0px;border-collapse:separate;letter-spacing:normal;font-variant:normal;text-transform:none;font-size:medium;font-style:normal;white-space:normal;font-family:Times;word-spacing:0px"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><font><span style="font-family:Arial" lang="ES"></span></font>|<font style="font-family:arial,helvetica,sans-serif" face="Arial" size="2"><font size="1"> <a href="mailto:emilien.macchi@stackops.com" target="_blank">emilien.macchi@stackops.com</a></font></font><span style="line-height:normal;text-indent:0px;border-collapse:separate;letter-spacing:normal;font-variant:normal;text-transform:none;font-size:medium;font-style:normal;white-space:normal;font-family:Times;word-spacing:0px"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><font face="Arial" color="#004438"><b><b><span style="font-size:10pt;color:rgb(0,68,56);font-family:Arial" lang="EN-GB"></span></b></b></font></span></span><span style="line-height:normal;text-indent:0px;border-collapse:separate;letter-spacing:normal;font-variant:normal;text-transform:none;font-size:medium;font-style:normal;white-space:normal;font-family:Times;word-spacing:0px"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><font style="font-family:arial,helvetica,sans-serif" face="Arial" size="2"><font size="1"></font></font></span></span></span></span></font></div>
</div><div><font face="Arial" color="#004438"><b><p><span style="line-height:normal;text-indent:0px;border-collapse:separate;letter-spacing:normal;font-variant:normal;text-transform:none;font-size:medium;font-style:normal;white-space:normal;font-family:Times;word-spacing:0px"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><span style="line-height:normal;text-indent:0px;border-collapse:separate;letter-spacing:normal;font-variant:normal;text-transform:none;font-size:medium;font-style:normal;white-space:normal;font-family:Times;word-spacing:0px"><span style="border-collapse:collapse;font-family:arial,sans-serif;font-size:13px"><font face="Arial" color="#004438"><b><b><span style="font-size:10pt;color:rgb(0,68,56);font-family:Arial" lang="EN-GB"><img src="http://stackops.s3-external-3.amazonaws.com/STACKOPSLOGO-ICON.png"></span></b></b></font></span></span></span></span></p>
</b></font></div><div><p><font color="#000000" size="1">******************** ADVERTENCIA LEGAL ********************<span> </span><br>Le
informamos, como destinatario de este mensaje, que el correo
electrónico y las comunicaciones por medio de Internet no permiten
asegurar ni garantizar la confidencialidad de los mensajes transmitidos,
así como tampoco su integridad o su correcta recepción, por lo que
STACKOPS TECHNOLOGIES S.L. no asume responsabilidad alguna por tales
circunstancias. Si no consintiese en la utilización del correo
electrónico o de las comunicaciones vía Internet le rogamos nos lo
comunique y ponga en nuestro conocimiento de manera inmediata. Este
mensaje va dirigido, de manera exclusiva, a su destinatario y contiene
información confidencial y sujeta al secreto profesional, cuya
divulgación no está permitida por la ley. En caso de haber recibido este
mensaje por error, le rogamos que, de forma inmediata, nos lo comunique
mediante correo electrónico remitido a nuestra atención y proceda a su
eliminación, así como a la de cualquier documento adjunto al mismo.
Asimismo, le comunicamos que la distribución, copia o utilización de
este mensaje, o de cualquier documento adjunto al mismo, cualquiera que
fuera su finalidad, están prohibidas por la ley.<span> </span><br><br>***************** PRIVILEGED AND CONFIDENTIAL ****************<span> </span><br>We
hereby inform you, as addressee of this message, that e-mail and
Internet do not guarantee the confidentiality, nor the completeness or
proper reception of the messages sent and, thus, STACKOPS TECHNOLOGIES
S.L. does not assume any liability for those circumstances. Should you
not agree to the use of e-mail or to communications via Internet, you
are kindly requested to notify us immediately. This message is intended
exclusively for the person to whom it is addressed and contains
privileged and confidential information protected from disclosure by
law. If you are not the addressee indicated in this message, you should
immediately delete it and any attachments and notify the sender by reply
e-mail. In such case, you are hereby notified that any dissemination,
distribution, copying or use of this message or any attachments, for any
purpose, is strictly prohibited by law.</font></p></div></span></span></font><br>