<html><head></head><body bgcolor="#FFFFFF"><div><div>Hi</div><div>I think No , I just config in nova.conf with flag :</div><div><blockquote type="cite"><div><div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0.8ex; border-left-width: 1px; border-left-color: rgb(204, 204, 204); border-left-style: solid; padding-left: 1ex; "><div lang="ZH-CN" link="blue" vlink="purple"><div><div><div class="h5"><p class="MsoNormal"><span lang="EN-US"><font class="Apple-style-span" color="#000000">--network_manager=nova.network.manager.FlatDHCPManager</font></span></p></div></div></div></div></blockquote></div></div></div></blockquote>and , do you mind I ask why you think maybe I config Vlan ,</div><div>So that I can find out something maybe I miss .</div><div><br></div><div>Thank you. </div><div>Best regards</div><div><a href="mailto:yuezhou.li@hisoft.com">yuezhou.li@hisoft.com</a><br><br>在 2012-6-15，18:50，Kris zhang <<a href="mailto:zhang.kris@gmail.com">zhang.kris@gmail.com</a>> 写道：<br><br></div><div></div><blockquote type="cite"><div><meta http-equiv="Content-Type" content="text/html; charset=utf-8">Do you remember if you have config any VLAN in your network?<div><br><br><div class="gmail_quote">On Fri, Jun 15, 2012 at 6:41 PM, David <span dir="ltr"><<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="ZH-CN" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">I use Flat DHCP in openstack<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">My nova.conf as follow :<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--dhcpbridge_flagfile=/etc/nova/nova.conf<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--dhcpbridge=/usr/bin/nova-dhcpbridge<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--logdir=/var/log/nova<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--state_path=/var/lib/nova<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--lock_path=/run/lock/nova<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--allow_admin_api=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--use_deprecated_auth=false<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--auth_strategy=keystone<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--scheduler_driver=nova.scheduler.simple.SimpleScheduler<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--s3_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--ec2_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--rabbit_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--cc_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--nova_url=<a href="http://192.168.7.151:8774/v1.1/" target="_blank">http://192.168.7.151:8774/v1.1/</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--routing_source_ip=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--glance_api_servers=<a href="http://192.168.7.151:9292" target="_blank">192.168.7.151:9292</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--image_service=nova.image.glance.GlanceImageService<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--iscsi_ip_prefix=192.168.4<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--sql_connection=mysql://<a href="http://root:hisoft@192.168.7.151/nova" target="_blank">root:hisoft@192.168.7.151/nova</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--ec2_url=<a href="http://192.168.7.151:8773/services/Cloud" target="_blank">http://192.168.7.151:8773/services/Cloud</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--keystone_ec2_url=<a href="http://192.168.7.151:5000/v2.0/ec2tokens" target="_blank">http://192.168.7.151:5000/v2.0/ec2tokens</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--api_paste_config=/etc/nova/api-paste.ini<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--libvirt_type=qemu<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--libvirt_use_virtio_for_bridges=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--start_guests_on_host_boot=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--resume_guests_state_on_host_boot=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"># vnc specific configuration<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--novnc_enabled=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--novncproxy_base_url=<a href="http://192.168.7.151:6080/vnc_auto.html" target="_blank">http://192.168.7.151:6080/vnc_auto.html</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--vncserver_proxyclient_address=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--vncserver_listen=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"># network specific settings<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--network_manager=nova.network.manager.FlatDHCPManager<u></u><u></u></span></p>
</div></div><p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--public_interface=br100<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--flat_interface=eth0<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--flat_network_bridge=br100<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--fixed_range=<a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--floating_range=<a href="http://192.168.7.208/28" target="_blank">192.168.7.208/28</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--network_size=32<u></u><u></u></span></p><div class="im">
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--flat_injected=False<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--force_dhcp_release<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--iscsi_helper=tgtadm<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--connection_type=libvirt<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--root_helper=sudo nova-rootwrap<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">--verbose<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
</div><p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">David(</span></b><b><span style="font-size:9.0pt;color:#1f497d">李跃洲</span></b><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">)<u></u><u></u></span></b></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">E-MAIL: <a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a><u></u><u></u></span></b></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt">发件人<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> Kris zhang [mailto:<a href="mailto:zhang.kris@gmail.com" target="_blank">zhang.kris@gmail.com</a>] <br>
</span><b><span style="font-size:10.0pt">发送时间<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> 2012</span><span style="font-size:10.0pt">年<span lang="EN-US">6</span>月<span lang="EN-US">15</span>日<span lang="EN-US"> 18:38<br>
</span><b>收件人<span lang="EN-US">:</span></b><span lang="EN-US"> David<br>
</span><b>抄送<span lang="EN-US">:</span></b><span lang="EN-US"> Emilien Macchi;
<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
</span><b>主题<span lang="EN-US">:</span></b><span lang="EN-US"> Re: [Openstack] </span>答复<span lang="EN-US">: </span>答复<span lang="EN-US">: instance cannot access outside network<u></u><u></u></span></span></p>
</div><div><div class="h5">
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Did you use the VLAN?<u></u><u></u></span></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US"><u></u> <u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US">On Fri, Jun 15, 2012 at 6:00 PM, David <<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<u></u><u></u></span></p>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">I use FlatDHCP mode actually .</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">And br100 as flat bridge , flat interface is eth0</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Also part of iptable rule on compute-node :</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-compute-inst-2 -m state --state INVALID -j DROP</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-compute-inst-2 -m state --state RELATED,ESTABLISHED -j
ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-compute-inst-2 -j nova-compute-provider</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-compute-inst-2 -s <a href="http://192.168.4.1/32" target="_blank">192.168.4.1/32</a> -p udp -m udp --sport 67 --dport 68 -j
ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-compute-inst-2 -s <a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a> -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-compute-inst-2 -j nova-compute-sg-fallback</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-compute-local -d <a href="http://192.168.4.3/32" target="_blank">192.168.4.3/32</a> -j nova-compute-inst-2</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-compute-sg-fallback -j DROP</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-filter-top -j nova-compute-local</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">And the output of ~#cat
/proc/sys/net/ipv4/ip_forward is 1 </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Output of ~# ip addr :</span><span lang="EN-US"><u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UP </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> link/ether 00:0c:29:cf:ec:d7 brd
ff:ff:ff:ff:ff:ff</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> inet <a href="http://192.168.7.153/27" target="_blank">192.168.7.153/27</a> brd 192.168.7.159 scope global br100</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> inet <a href="http://192.168.4.1/27" target="_blank">192.168.4.1/27</a> scope global br100</span><span lang="EN-US"><u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> inet6 fe80::20c:29ff:fecf:ecd7/64 scope link </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> valid_lft forever preferred_lft forever</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">So these looks all reasonable . I really don’t know why the vm
cannot get ip </span><span lang="EN-US" style="font-size:10.5pt;font-family:Wingdings;color:#1f497d">L</span><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">.</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Thank you </span><span lang="EN-US"><u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Best Regards</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">David(</span></b><b><span style="font-size:9.0pt;color:#1f497d">李跃洲</span></b><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">)</span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">E-MAIL:
<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt">发件人<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> <a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a> [mailto:<a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a>]
</span><b><span style="font-size:10.0pt">代表 </span></b><span lang="EN-US" style="font-size:10.0pt">Emilien Macchi</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><b><span style="font-size:10.0pt">发送时间<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> 2012</span><span style="font-size:10.0pt">年<span lang="EN-US">6</span>月<span lang="EN-US">15</span>日<span lang="EN-US"> 17:38<br>
</span><b>收件人<span lang="EN-US">:</span></b><span lang="EN-US"> David<br>
</span><b>抄送<span lang="EN-US">:</span></b><span lang="EN-US"> <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
</span><b>主题<span lang="EN-US">:</span></b><span lang="EN-US"> Re: </span>答复<span lang="EN-US">: [Openstack] instance cannot access outside network</span></span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US">If you use VLAN, you should to be sure that your physical network
interface is configured as a a trunk interface on the Switch.<br>
<br>
On the physical switch :<br>
<br>
switchport mode trunk<br>
switchport trunk encapsulation dot1q<br>
<br>
<br>
To snif the network and see if you can see tagget packets, use :<br>
<br>
tcpdump -nnei eth1 (if eth1 is your bridge)<br>
<br>
<br>
<br>
Regards<br>
<br>
<u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US">On Fri, Jun 15, 2012 at 11:14 AM, David <<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<u></u><u></u></span></p>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">I try to add flag –routing_source_ip = 192.168.7.151 which is my
controller ip with nova-network .but it didn’t work .</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">I found the console.log output error :</span><span lang="EN-US"> </span><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">when Starting network...</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">udhcpc (v1.18.5) started</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Sending discover...</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Sending discover...</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Sending discover...</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">No lease, failing</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">WARN: /etc/rc3.d/S40-network failed</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">I doubt that the vm on compute-node cannot find
dhcp-server or vm cannot get the response from dhcp-server</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">So I use tcpdump try to trace the dhcp request . The log as
follow :</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">First I restart network in vm . the vm will retry discovery
dhcp-server to get ip .</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">The MAC of vm is : fe:16:3e:50:6d:1c , and nova give the
ip : 192.168.4.3 to the vm ,I use (~#nova list) to find. </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">BUT the ip didn’t associate to vm . it just in db as a record
.</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">On compute-controller :</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">On compute-node :</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">~# tcpdump -i br100 -n port 67 or 68</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">tcpdump: verbose output suppressed, use -v or -vv for full
protocol decode</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">listening on br100, link-type EN10MB (Ethernet), capture size 65535
bytes</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">01:13:46.794501 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">01:13:49.799593 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">01:13:52.803964 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">~# tcpdump -i br100 -n port 67 or 68</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">tcpdump: verbose output suppressed, use -v or -vv for full
protocol decode</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">listening on br100, link-type EN10MB (Ethernet), capture size 65535
bytes</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">01:13:47.995389 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">01:13:47.995785 IP 192.168.4.1.67 > 192.168.4.3.68:
BOOTP/DHCP, Reply, length 309</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">01:13:51.000454 IP 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP,
Request from fa:16:3e:50:6d:1c, length 280</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">01:13:51.000911 IP 192.168.4.1.67 > 192.168.4.3.68:
BOOTP/DHCP, Reply, length 309</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">01:13:54.004840 IP 0.0.0.0.68 > 255.255.255.255.67:
BOOTP/DHCP, Request from fa:16:3e:50:6d:1c, length 280</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">01:13:54.005196 IP 192.168.4.1.67 > 192.168.4.3.68:
BOOTP/DHCP, Reply, length 309</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">Could anyone tell me why ?</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">David(</span></b><b><span style="font-size:9.0pt;color:#1f497d">李跃洲</span></b><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">)</span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">E-MAIL:
<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></b><span lang="EN-US"><u></u><u></u></span></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt">发件人<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> <a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a> [mailto:<a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a>]
</span><b><span style="font-size:10.0pt">代表 </span></b><span lang="EN-US" style="font-size:10.0pt">Emilien Macchi</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><b><span style="font-size:10.0pt">发送时间<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> 2012</span><span style="font-size:10.0pt">年<span lang="EN-US">6</span>月<span lang="EN-US">14</span>日<span lang="EN-US"> 19:03</span></span><span lang="EN-US"><u></u><u></u></span></p>
<div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt">收件人<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> David<br>
</span><b><span style="font-size:10.0pt">抄送<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> <<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>><br>
</span><b><span style="font-size:10.0pt">主题<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> Re: [Openstack] instance cannot access
outside network</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US">Don't forget to CC the mail ;-) for the community.<br>
<br>
<br>
I think you should try to add <b>--routing_source_ip</b>=<IP of
nova-network> flag in your nova.conf.<br>
<br>
<br>
Regards,<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US">On Thu, Jun 14, 2012 at 12:51 PM, David <<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<u></u><u></u></span></p>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">I try </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">#cat /proc/sys/net/ipv4/ip_forward</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> The result is 1</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">And the iptables have wrote by nova actually .</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">As follow :</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"># Generated by iptables-save v1.4.12 on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">*nat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:PREROUTING ACCEPT [774:124753]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:INPUT ACCEPT [534:94672]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:OUTPUT ACCEPT [858:54250]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:POSTROUTING ACCEPT [919:59061]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-api-OUTPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-api-POSTROUTING - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-api-PREROUTING - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-api-float-snat - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-api-snat - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-network-OUTPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-network-POSTROUTING - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-network-PREROUTING - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-network-float-snat - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-network-snat - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-postrouting-bottom - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A PREROUTING -j nova-network-PREROUTING</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A PREROUTING -j nova-api-PREROUTING</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A OUTPUT -j nova-network-OUTPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A OUTPUT -j nova-api-OUTPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A POSTROUTING -j nova-network-POSTROUTING</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A POSTROUTING -j nova-api-POSTROUTING</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A POSTROUTING -j nova-postrouting-bottom</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A POSTROUTING -s <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> ! -d <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> -p tcp -j MASQUERADE --to-ports 1024-65535</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A POSTROUTING -s <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> ! -d <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> -p udp -j MASQUERADE --to-ports 1024-65535</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A POSTROUTING -s <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> ! -d <a href="http://192.168.122.0/24" target="_blank">192.168.122.0/24</a> -j MASQUERADE</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-api-snat -j nova-api-float-snat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-network-POSTROUTING -s <a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a> -d <a href="http://192.168.7.151/32" target="_blank">192.168.7.151/32</a> -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-network-POSTROUTING -s <a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a> -d <a href="http://10.128.0.0/24-j" target="_blank">10.128.0.0/24 -j</a> ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-network-POSTROUTING -s <a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a> -d <a href="http://192.168.4.0/27-m" target="_blank">192.168.4.0/27 -m</a> conntrack ! --ctstate DNAT -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-network-PREROUTING -d <a href="http://169.254.169.254/32" target="_blank">169.254.169.254/32</a> -p tcp -m tcp --dport 80 -j DNAT
--to-destination <a href="http://192.168.7.151:8775" target="_blank">192.168.7.151:8775</a></span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-network-snat -j nova-network-float-snat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-network-snat -s <a href="http://192.168.4.0/27" target="_blank">192.168.4.0/27</a> -j SNAT --to-source 192.168.7.151</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-postrouting-bottom -j nova-network-snat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-postrouting-bottom -j nova-api-snat</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">COMMIT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"># Completed on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"># Generated by iptables-save v1.4.12 on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">*mangle</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:PREROUTING ACCEPT [224637:108582489]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:INPUT ACCEPT [221029:107788819]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:FORWARD ACCEPT [29116:11774224]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:OUTPUT ACCEPT [187094:188512394]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:POSTROUTING ACCEPT [216210:200286618]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A POSTROUTING -o virbr0 -p udp -m udp --dport 68 -j CHECKSUM
--checksum-fill</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">COMMIT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"># Completed on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"># Generated by iptables-save v1.4.12 on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">*filter</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:INPUT ACCEPT [91273:50201087]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:FORWARD ACCEPT [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:OUTPUT ACCEPT [84624:51049560]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-api-FORWARD - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-api-INPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-api-OUTPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-api-local - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-filter-top - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-network-FORWARD - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-network-INPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-network-OUTPUT - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">:nova-network-local - [0:0]</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A INPUT -j nova-network-INPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A INPUT -j nova-api-INPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A INPUT -i virbr0 -p udp -m udp --dport 53 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A INPUT -i virbr0 -p tcp -m tcp --dport 53 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A INPUT -i virbr0 -p udp -m udp --dport 67 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A INPUT -i virbr0 -p tcp -m tcp --dport 67 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A FORWARD -j nova-filter-top</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A FORWARD -j nova-network-FORWARD</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A FORWARD -j nova-api-FORWARD</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A FORWARD -i virbr0 -o virbr0 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A FORWARD -o virbr0 -j REJECT --reject-with
icmp-port-unreachable</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A FORWARD -i virbr0 -j REJECT --reject-with
icmp-port-unreachable</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A OUTPUT -j nova-filter-top</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A OUTPUT -j nova-network-OUTPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A OUTPUT -j nova-api-OUTPUT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-api-INPUT -d <a href="http://192.168.7.151/32" target="_blank">192.168.7.151/32</a> -p tcp -m tcp --dport 8775 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-filter-top -j nova-network-local</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-filter-top -j nova-api-local</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-network-FORWARD -i br100 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">-A nova-network-FORWARD -o br100 -j ACCEPT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d">COMMIT</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"># Completed on Fri Jun 15 02:58:58 2012</span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Best
Regards</span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">David(</span></b><b><span style="font-size:9.0pt;color:#1f497d">李跃洲</span></b><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">)</span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal" style="text-align:justify;text-justify:inter-ideograph"><b><span lang="EN-US" style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d">E-MAIL:
<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span><span lang="EN-US"><u></u><u></u></span></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:10.0pt">发件人<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> <a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a> [mailto:<a href="mailto:emilien.macchi@gmail.com" target="_blank">emilien.macchi@gmail.com</a>]
</span><b><span style="font-size:10.0pt">代表 </span></b><span lang="EN-US" style="font-size:10.0pt">Emilien Macchi<br>
</span><b><span style="font-size:10.0pt">发送时间<span lang="EN-US">:</span></span></b><span lang="EN-US" style="font-size:10.0pt"> 2012</span><span style="font-size:10.0pt">年<span lang="EN-US">6</span>月<span lang="EN-US">14</span>日<span lang="EN-US"> 16:51<br>
</span><b>收件人<span lang="EN-US">:</span></b><span lang="EN-US"> David<br>
</span><b>抄送<span lang="EN-US">:</span></b><span lang="EN-US"> <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
</span><b>主题<span lang="EN-US">:</span></b><span lang="EN-US"> Re: [Openstack]
instance cannot access outside network</span></span><span lang="EN-US"><u></u><u></u></span></p>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US">Hi,<br>
<br>
Can you try :<br>
<br>
<b>echo 1 > /proc/sys/net/<i>ipv4</i>/ip_forward</b> on the nova-network
node.<br>
<br>
And also modify <b>/etc/sysctl.conf</b> to uncomment the ip_forward parameter :<br>
<br>
<b>net.ipv4.ip_forward = 1</b><br>
<br>
<br>
Is it ok now ?<br>
<br>
<br>
Regards<u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US">On Thu, Jun 14, 2012 at 10:24 AM, David <<a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a>>
wrote:<u></u><u></u></span></p>
<div>
<div>
<p class="MsoNormal"><span lang="EN-US">Hi All<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">I try to install openstack on multi-node . <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">I can boot instance and use vnc console to visit the instance .<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">But , I cannot access outside in instance .<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">I found the fixed ip range didn’t put on the br100 at compute-node
only on compute-controller. The compute-node only install nova-compute<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">On compute-node , ip addr<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state
UNKNOWN <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>
scope host lo<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 ::1/128 scope host <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast master br100 state UP qlen 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:cf:ec:d7 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast state UP qlen 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:cf:ec:e1 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://192.168.7.153/27" target="_blank">192.168.7.153/27</a> brd 192.168.7.159 scope global eth1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 fe80::20c:29ff:fecf:ece1/64 scope link <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">4: br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UP <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:cf:ec:d7 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 fe80::20c:29ff:fecf:ecd7/64 scope link <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">on compute-controller :<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state
UNKNOWN <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/loopback 00:00:00:00:00:00 brd
00:00:00:00:00:00<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://127.0.0.1/8" target="_blank">127.0.0.1/8</a>
scope host lo<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://169.254.169.254/32" target="_blank">169.254.169.254/32</a> scope link lo<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 ::1/128 scope host <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast master br100 state UP qlen 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:88:31:51 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast state UP qlen 1000<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:88:31:5b brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://192.168.7.151/27" target="_blank">192.168.7.151/27</a> brd 192.168.7.159 scope global eth1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 fe80::20c:29ff:fe88:315b/64 scope link <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">4: br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc
noqueue state UP <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> link/ether 00:0c:29:88:31:51 brd
ff:ff:ff:ff:ff:ff<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://10.0.0.3/27" target="_blank">10.0.0.3/27</a>
brd 10.0.0.31 scope global br100<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet <a href="http://192.168.4.33/27" target="_blank">192.168.4.33/27</a> brd 192.168.4.63 scope global br100<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> inet6 fe80::20c:29ff:fe88:3151/64 scope link <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> valid_lft forever preferred_lft
forever<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">could Any one tell me why ? Or tell me how openstack set network
bridge on compute-node so that I can figure out what happened .<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">My nova.conf :<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--dhcpbridge_flagfile=/etc/nova/nova.conf<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--dhcpbridge=/usr/bin/nova-dhcpbridge<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--logdir=/var/log/nova<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--state_path=/var/lib/nova<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--lock_path=/run/lock/nova<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--allow_admin_api=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--use_deprecated_auth=false<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--auth_strategy=keystone<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--scheduler_driver=nova.scheduler.simple.SimpleScheduler<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--s3_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--ec2_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--rabbit_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--cc_host=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--nova_url=<a href="http://192.168.7.151:8774/v1.1/" target="_blank">http://192.168.7.151:8774/v1.1/</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--routing_source_ip=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--glance_api_servers=<a href="http://192.168.7.151:9292" target="_blank">192.168.7.151:9292</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--image_service=nova.image.glance.GlanceImageService<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--iscsi_ip_prefix=192.168.4<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--sql_connection=mysql://<a href="http://root:hisoft@192.168.7.151/nova" target="_blank">root:hisoft@192.168.7.151/nova</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--ec2_url=<a href="http://192.168.7.151:8773/services/Cloud" target="_blank">http://192.168.7.151:8773/services/Cloud</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--keystone_ec2_url=<a href="http://192.168.7.151:5000/v2.0/ec2tokens" target="_blank">http://192.168.7.151:5000/v2.0/ec2tokens</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--api_paste_config=/etc/nova/api-paste.ini<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--libvirt_type=qemu<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--libvirt_use_virtio_for_bridges=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--start_guests_on_host_boot=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--resume_guests_state_on_host_boot=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"># vnc specific configuration<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--novnc_enabled=true<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--novncproxy_base_url=<a href="http://192.168.7.151:6080/vnc_auto.html" target="_blank">http://192.168.7.151:6080/vnc_auto.html</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--vncserver_proxyclient_address=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--vncserver_listen=192.168.7.151<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"># network specific settings<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--network_manager=nova.network.manager.FlatDHCPManager<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--public_interface=eth1<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--flat_network_bridge=br100<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--fixed_range=<a href="http://192.168.4.1/27" target="_blank">192.168.4.1/27</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--floating_range=<a href="http://192.168.7.208/28" target="_blank">192.168.7.208/28</a><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--network_size=32<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--flat_network_dhcp_start=192.168.4.33<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--flat_injected=False<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--force_dhcp_release<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--iscsi_helper=tgtadm<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--connection_type=libvirt<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--root_helper=sudo nova-rootwrap<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">--verbose<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">And nova version :<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">#nova-manage version<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">2012.1 (2012.1-LOCALBRANCH:LOCALREVISION)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US">Thank you in advance .<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:9.0pt;color:#1f497d">David(</span>李跃洲</b><b><span lang="EN-US" style="font-size:9.0pt;color:#1f497d">)</span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:9.0pt;color:#1f497d">E-MAIL: <a href="mailto:yuezhou.li@hisoft.com" target="_blank">yuezhou.li@hisoft.com</a></span></b><span lang="EN-US"><u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US"><br>
_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US"><br>
<br clear="all">
<br>
-- <u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888">Emilien
Macchi</span><span lang="ES" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888"><br>
<b>SysAdmin (Intern)</b></span><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888"><br>
<b><a href="http://www.stackops.com/" target="_blank">www.stackops.com</a></b>
|</span><span lang="EN-US" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#888888"> <a href="mailto:emilien.macchi@stackops.com" target="_blank">emilien.macchi@stackops.com</a></span><span lang="EN-US"><u></u><u></u></span></p>
</div>
</div>
</div>
<div>
<p><span style="font-size:10.0pt;color:#004438">错误！未指定文件名。</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<div>
<div>
<p><span lang="EN-US" style="font-size:7.5pt;font-family:"Arial","sans-serif"">********************
ADVERTENCIA LEGAL ******************** <br>
Le informamos, como destinatario de este mensaje, que el correo electrónico y
las comunicaciones por medio de Internet no permiten asegurar ni garantizar la confidencialidad
de los mensajes transmitidos, así como tampoco su integridad o su correcta
recepción, por lo que STACKOPS TECHNOLOGIES S.L. no asume responsabilidad
alguna por tales circunstancias. Si no consintiese en la utilización del correo
electrónico o de las comunicaciones vía Internet le rogamos nos lo comunique y
ponga en nuestro conocimiento de manera inmediata. Este mensaje va dirigido, de
manera exclusiva, a su destinatario y contiene información confidencial y
sujeta al secreto profesional, cuya divulgación no está permitida por la ley.
En caso de haber recibido este mensaje por error, le rogamos que, de forma
inmediata, nos lo comunique mediante correo electrónico remitido a nuestra
atención y proceda a su eliminación, así como a la de cualquier documento
adjunto al mismo. Asimismo, le comunicamos que la distribución, copia o
utilización de este mensaje, o de cualquier documento adjunto al mismo,
cualquiera que fuera su finalidad, están prohibidas por la ley. <br>
<br>
***************** PRIVILEGED AND CONFIDENTIAL **************** <br>
We hereby inform you, as addressee of this message, that e-mail and Internet do
not guarantee the confidentiality, nor the completeness or proper reception of
the messages sent and, thus, STACKOPS TECHNOLOGIES S.L. does not assume any
liability for those circumstances. Should you not agree to the use of e-mail or
to communications via Internet, you are kindly requested to notify us
immediately. This message is intended exclusively for the person to whom it is
addressed and contains privileged and confidential information protected from
disclosure by law. If you are not the addressee indicated in this message, you
should immediately delete it and any attachments and notify the sender by reply
e-mail. In such case, you are hereby notified that any dissemination,
distribution, copying or use of this message or any attachments, for any
purpose, is strictly prohibited by law.</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span lang="EN-US"><br>
<br clear="all">
<br>
-- <u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888">Emilien
Macchi</span><span lang="ES" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888"><br>
<b>SysAdmin (Intern)</b></span><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888"><br>
<b><a href="http://www.stackops.com/" target="_blank">www.stackops.com</a></b>
|</span><span lang="EN-US" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#888888"> <a href="mailto:emilien.macchi@stackops.com" target="_blank">emilien.macchi@stackops.com</a></span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<div>
<p><span style="font-size:10.0pt;color:#004438">错误！未指定文件名。</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<div>
<p><span lang="EN-US" style="font-size:7.5pt;font-family:"Arial","sans-serif"">********************
ADVERTENCIA LEGAL ******************** <br>
Le informamos, como destinatario de este mensaje, que el correo electrónico y las
comunicaciones por medio de Internet no permiten asegurar ni garantizar la
confidencialidad de los mensajes transmitidos, así como tampoco su integridad o
su correcta recepción, por lo que STACKOPS TECHNOLOGIES S.L. no asume
responsabilidad alguna por tales circunstancias. Si no consintiese en la
utilización del correo electrónico o de las comunicaciones vía Internet le
rogamos nos lo comunique y ponga en nuestro conocimiento de manera inmediata.
Este mensaje va dirigido, de manera exclusiva, a su destinatario y contiene
información confidencial y sujeta al secreto profesional, cuya divulgación no
está permitida por la ley. En caso de haber recibido este mensaje por error, le
rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico remitido
a nuestra atención y proceda a su eliminación, así como a la de cualquier
documento adjunto al mismo. Asimismo, le comunicamos que la distribución, copia
o utilización de este mensaje, o de cualquier documento adjunto al mismo,
cualquiera que fuera su finalidad, están prohibidas por la ley. <br>
<br>
***************** PRIVILEGED AND CONFIDENTIAL **************** <br>
We hereby inform you, as addressee of this message, that e-mail and Internet do
not guarantee the confidentiality, nor the completeness or proper reception of
the messages sent and, thus, STACKOPS TECHNOLOGIES S.L. does not assume any
liability for those circumstances. Should you not agree to the use of e-mail or
to communications via Internet, you are kindly requested to notify us
immediately. This message is intended exclusively for the person to whom it is
addressed and contains privileged and confidential information protected from
disclosure by law. If you are not the addressee indicated in this message, you
should immediately delete it and any attachments and notify the sender by reply
e-mail. In such case, you are hereby notified that any dissemination,
distribution, copying or use of this message or any attachments, for any
purpose, is strictly prohibited by law.</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><br>
<br clear="all">
<br>
-- <u></u><u></u></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888">Emilien
Macchi</span><span lang="ES" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888"><br>
<b>SysAdmin (Intern)</b></span><span lang="EN-US" style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888"><br>
<b><a href="http://www.stackops.com/" target="_blank">www.stackops.com</a></b>
|</span><span lang="EN-US" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:#888888"> <a href="mailto:emilien.macchi@stackops.com" target="_blank">emilien.macchi@stackops.com</a></span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<div>
<p><span style="font-size:10.0pt;color:#004438">错误！未指定文件名。</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<div>
<p><span lang="EN-US" style="font-size:7.5pt;font-family:"Arial","sans-serif"">********************
ADVERTENCIA LEGAL ******************** <br>
Le informamos, como destinatario de este mensaje, que el correo electrónico y
las comunicaciones por medio de Internet no permiten asegurar ni garantizar la
confidencialidad de los mensajes transmitidos, así como tampoco su integridad o
su correcta recepción, por lo que STACKOPS TECHNOLOGIES S.L. no asume
responsabilidad alguna por tales circunstancias. Si no consintiese en la
utilización del correo electrónico o de las comunicaciones vía Internet le
rogamos nos lo comunique y ponga en nuestro conocimiento de manera inmediata.
Este mensaje va dirigido, de manera exclusiva, a su destinatario y contiene
información confidencial y sujeta al secreto profesional, cuya divulgación no
está permitida por la ley. En caso de haber recibido este mensaje por error, le
rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico
remitido a nuestra atención y proceda a su eliminación, así como a la de
cualquier documento adjunto al mismo. Asimismo, le comunicamos que la
distribución, copia o utilización de este mensaje, o de cualquier documento
adjunto al mismo, cualquiera que fuera su finalidad, están prohibidas por la
ley. <br>
<br>
***************** PRIVILEGED AND CONFIDENTIAL **************** <br>
We hereby inform you, as addressee of this message, that e-mail and Internet do
not guarantee the confidentiality, nor the completeness or proper reception of
the messages sent and, thus, STACKOPS TECHNOLOGIES S.L. does not assume any
liability for those circumstances. Should you not agree to the use of e-mail or
to communications via Internet, you are kindly requested to notify us
immediately. This message is intended exclusively for the person to whom it is
addressed and contains privileged and confidential information protected from
disclosure by law. If you are not the addressee indicated in this message, you
should immediately delete it and any attachments and notify the sender by reply
e-mail. In such case, you are hereby notified that any dissemination, distribution,
copying or use of this message or any attachments, for any purpose, is strictly
prohibited by law.</span><span lang="EN-US"><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US"> <u></u><u></u></span></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span lang="EN-US"><br>
_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><u></u><u></u></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
</div>
</div></div></div>
</div>
</blockquote></div><br></div>
</div></blockquote></div><div></div></body></html>