<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:Consolas;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1516312203;
mso-list-type:hybrid;
mso-list-template-ids:-198306760 262291606 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
mso-ascii-font-family:Calibri;
mso-fareast-font-family:Calibri;
mso-hansi-font-family:Calibri;
mso-bidi-font-family:Calibri;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt">Hi,<o:p></o:p></span></p>
<p><span lang="EN" style="font-family:"Calibri","sans-serif"">I am working with multi-node environment and tried the following steps:<o:p></o:p></span></p>
<p style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span lang="EN" style="font-family:"Calibri","sans-serif"">Create a source group and a target group.<o:p></o:p></span></p>
<p style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">a.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span lang="EN" style="font-family:"Calibri","sans-serif"">nova secgroup-create srcsecgrp "Source Security Group"<o:p></o:p></span></p>
<p style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">b.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>nova secgroup-create tgtsecgrp "Target Security Group"<span lang="EN" style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
<p style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span lang="EN" style="font-family:"Calibri","sans-serif"">Spawn VMs in both the groups separately.<o:p></o:p></span></p>
<p style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">a.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>nova boot --flavor=100 --image=120 --key_name=key1 --security_group=srcsecgrp srcvm<span lang="EN" style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
<p style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">b.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>nova boot --flavor=100 --image=120 --key_name=key1 --security_group=tgtsecgrp tgtvm<span lang="EN" style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
<p style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span lang="EN" style="font-family:"Calibri","sans-serif"">Add source group as a source to the target group.<o:p></o:p></span></p>
<p style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">a.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>nova secgroup-add-group-rule --ip_proto=icmp --from_port=-1 --to_port=-1 tgtgrp srcgrp<span lang="EN" style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
<p style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">b.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>nova secgroup-add-group-rule --ip_proto=tcp --from_port=22 --to_port=22 tgtgrp srcgrp<span lang="EN" style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
<p style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">4.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span lang="EN" style="font-family:"Calibri","sans-serif"">Add rules to allow ssh/ping into source group.<o:p></o:p></span></p>
<p style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">a.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>nova secgroup-add-rule srcgrp tcp 22 22 0.0.0.0/0<span lang="EN" style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
<p style="margin-left:1.0in;text-indent:-.25in;mso-list:l0 level2 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">b.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]>nova secgroup-add-rule srcgrp icmp -1 -1 0.0.0.0/0<span lang="EN" style="font-family:"Calibri","sans-serif""><o:p></o:p></span></p>
<p style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">5.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span lang="EN" style="font-family:"Calibri","sans-serif"">Now ssh into the source group and ping/ssh to target group vm using its private IP – should be successful/<o:p></o:p></span></p>
<p style="margin-left:.5in;text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span lang="EN" style="font-family:"Calibri","sans-serif""><span style="mso-list:Ignore">6.<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span lang="EN" style="font-family:"Calibri","sans-serif"">Now try to ping/ssh to target group vm using its public ip – this is being successful when both the VMs are hosted onto same compute node but it is not pingable when both
source and target group VMs are hosted to different compute nodes.<o:p></o:p></span></p>
<p><span lang="EN" style="font-family:"Calibri","sans-serif"">Which behavior is expected? Is the target group VM needs to be pingable through its floating IP from a source group VM with above configuration?<br>
I checked this scenario in stable Diablo version and as well as Folsom (distro).<o:p></o:p></span></p>
<p><span lang="EN" style="font-family:"Calibri","sans-serif"">I have raised a ticket for this in Launchpad
<a href="https://bugs.launchpad.net/nova/+bug/1040414">https://bugs.launchpad.net/nova/+bug/1040414</a>
<o:p></o:p></span></p>
<p><span lang="EN" style="font-family:"Calibri","sans-serif""><Looping </span><a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a> for suggestions and support<span lang="EN" style="font-family:"Calibri","sans-serif"">><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Thanks & Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt">Sirisha Devineni.<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p>DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Persistent Systems Ltd. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Persistent Systems Ltd. does not accept any liability for virus infected mails.</p>
</body>
</html>