<html><body><div style="color:#000; background-color:#fff; font-family:tahoma, new york, times, serif;font-size:12pt"><div><div><font face="tahoma, new york, times, serif"><span style="font-size: 16px;">From reading http://docs.openstack.org/trunk/openstack-compute/admin/content/network-troubleshooting.html</span></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif">I think its related to iptables NAT chain rules required. Am I on the right lines?</font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style:
normal;"><span style="background-color: transparent; font-size: 10px;"><br></span></div><div style="color: rgb(0, 0, 0); font-size: 10px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><span style="background-color: transparent; font-size: 10px;">Openstack Host: /etc/nova/nova.conf</span><br></div><div style="color: rgb(0, 0, 0); font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal; font-size: 10px;"><font face="tahoma, new york, times, serif"><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="font-size: 10px;"># network specific settings<br clear="none">--network_manager=nova.network.manager.FlatDHCPManager<br clear="none">--public_interface=eth0<br clear="none">--flat_interface=eth1<br clear="none">--flat_network_bridge=br100<br
clear="none">--fixed_range=10.0.2.32/27<br clear="none">--floating_range=10.0.1.224/27<br clear="none">--network_size=32<br clear="none">--flat_network_dhcp_start=10.0.2.33<br clear="none">--flat_injected=False<br clear="none">--force_dhcp_release<br clear="none">--iscsi_helper=tgtadm<br clear="none">--connection_type=libvirt<br clear="none">--root_helper=sudo nova-rootwrap<br clear="none">--verbose</span></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="font-size: x-small;"><br clear="none"></span></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="font-size: x-small;"><span style="font-family: tahoma, 'new york', times, serif; line-height: normal;">Openstack Host: ifconfig settings</span><br></span></div><div style="margin: 0px;
padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="font-size: x-small;">br100 10.0.2.33/27</span></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="font-size: 10px;">eth0 192.168.1.38/24 Gateway 192.168.1.200 (office network)</span></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="font-size: x-small;">virbr0 192.168.1.122</span></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="font-size: x-small;">vnet0</span></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid
Sans', sans-serif; line-height: 19.985795974731445px;"><span style="font-size: x-small;"><br clear="none"></span></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="font-size: x-small;">VM Guest<span style="font-family: tahoma, 'new york', times, serif; background-color: transparent;">: ifconfig settings</span></span></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="line-height: 19.985795974731445px; background-color: transparent; font-size: 10px;">vtnet0 10.0.2.34</span><br></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;"><span style="line-height: 19.985795974731445px; background-color: transparent; font-size: 10px;">Openstack VM
Guest instance IPs:</span></div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;">10.0.2.34</div><div style="margin: 0px; padding: 0px; border: 0px; font-family: Helvetica, Arial, 'Droid Sans', sans-serif; line-height: 19.985795974731445px;">10.0.1.229 (floating ip pool)</div></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font
face="tahoma, new york, times, serif">So from this I think my</font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><floating ip> = 10.0.1.229</font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><fix ip> = 10.0.2.34<br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px;
font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;">So I need to enter this ... Does this look right?</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif">iptables -A nova-network-OUTPUT -d <floating ip>/27 -j DNAT --to-destination <fix ip></font></div><div><font face="tahoma, new york, times, serif">iptables -A nova-network-PREROUTING -d <floating ip>/27 -j DNAT --to-destination <fix ip></font></div><div><font face="tahoma, new york, times, serif">iptables -A nova-network-floating-snat -s <fix ip>/27 -j SNAT --to-source
<floating ip></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style: normal;"><font face="tahoma, new york, times, serif"><br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: tahoma, 'new york', times, serif; background-color: transparent; font-style:
normal;"><font face="tahoma, new york, times, serif"><br></font></div></div></div></body></html>