<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:'times new roman', 'new york', times, serif;font-size:12pt"><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">Hi,</div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><span class="Apple-tab-span" style="white-space:pre"> </span>I didn't use namespaces. Here are more information and I hope someone can give a light.</div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">CentOS 6.3</div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">Openstack Folsom</div><div style="color: black; font-family: 'times new roman', 'new york',
times, serif; font-size: 12pt;">Quantum - LinuxBridge</div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">Single node with two NIC ( em1 and em 3. They are on different VLAN on the physical switch ).</div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">/etc/sysctl.conf</div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><span style="font-size: 12pt;">net.ipv4.ip_forward = 1</span></div><div style="color: black; font-family: 'times new roman', 'new york',
times, serif; font-size: 12pt;"><div>net.ipv4.conf.default.rp_filter = 0</div><div>net.ipv4.conf.default.accept_source_route = 0</div><div>kernel.sysrq = 0</div><div>kernel.core_uses_pid = 1</div><div>net.ipv4.tcp_syncookies = 1</div><div>net.bridge.bridge-nf-call-ip6tables = 1</div><div>net.bridge.bridge-nf-call-iptables = 1</div><div>net.bridge.bridge-nf-call-arptables = 1</div><div>kernel.msgmnb = 65536</div><div>kernel.msgmax = 65536</div><div>kernel.shmmax = 68719476736</div><div>kernel.shmall = 4294967296</div></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new
roman, new york, times, serif">/etc/sysconfig/modules/openstack-quantum-linuxbridge.modules</font></div><div><font face="times new roman, new york, times, serif"><div>#!/bin/sh</div><div>modprobe -b bridge >/dev/null 2>&1</div><div>exit 0</div></font></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">/etc/sysconfig/network-scripts/ifcfg-em1</div><div><div><font face="times new roman, new york, times, serif">DEVICE="em1"</font></div><div><font
face="times new roman, new york, times, serif">BOOTPROTO="static"</font></div><div><font face="times new roman, new york, times, serif">DNS1="10.99.99.1"</font></div><div><font face="times new roman, new york, times, serif">GATEWAY="10.38.0.254"</font></div><div><span style="font-family: 'times new roman', 'new york', times, serif;">IPADDR="10.38.15.251"</span></div><div><font face="times new roman, new york, times, serif">IPV6INIT="no"</font></div><div><font face="times new roman, new york, times, serif">MTU="1500"</font></div><div><font face="times new roman, new york, times, serif">NETMASK="255.255.0.0"</font></div><div><font face="times new roman, new york, times, serif">NM_CONTROLLED="yes"</font></div><div><font face="times new roman, new york, times, serif">ONBOOT="yes"</font></div><div><font face="times new roman, new york, times, serif">TYPE="Ethernet"</font></div></div><div style="color: black; font-family: 'times new roman', 'new york', times,
serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div><div style="font-size: 12pt; font-family: 'times new roman', 'new york', times, serif;">/etc/sysconfig/network-scripts/ifcfg-em3</div><div></div><div><font face="times new roman, new york, times, serif">DEVICE="em3"</font></div><div><font face="times new roman, new york, times, serif">BOOTPROTO="none"</font></div><div><span style="font-family: 'times new roman', 'new york', times, serif;">NM_CONTROLLED="yes"</span></div><div><font face="times new roman, new york, times, serif">ONBOOT="yes"</font></div><div><font face="times new roman, new york, times,
serif">TYPE="Ethernet"</font></div></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;">/etc/nova/nova.conf</div><div><div><font face="times new roman, new york, times, serif">[DEFAULT]</font></div><div><font face="times new roman, new york, times, serif">logdir = /var/log/nova</font></div><div><font face="times new roman, new york, times, serif">state_path = /var/lib/nova</font></div><div><font face="times new roman, new york, times, serif">lock_path =
/var/lib/nova/tmp</font></div><div><font face="times new roman, new york, times, serif">volumes_dir = /etc/nova/volumes</font></div><div><font face="times new roman, new york, times, serif">dhcpbridge = /usr/bin/nova-dhcpbridge</font></div><div><font face="times new roman, new york, times, serif">dhcpbridge_flagfile = /etc/nova/nova.conf</font></div><div><font face="times new roman, new york, times, serif">force_dhcp_release = True</font></div><div><font face="times new roman, new york, times, serif">injected_network_template = /usr/share/nova/interfaces.template</font></div><div><font face="times new roman, new york, times, serif">libvirt_nonblocking = True</font></div><div><font face="times new roman, new york, times, serif">libvirt_inject_partition = -1</font></div><div><font face="times new roman, new york, times, serif">network_manager = nova.network.manager.FlatDHCPManager</font></div><div><font face="times new roman, new york, times,
serif">iscsi_helper = tgtadm</font></div><div><font face="times new roman, new york, times, serif">sql_connection = mysql://nova:nova@localhost/nova</font></div><div><font face="times new roman, new york, times, serif">compute_driver = libvirt.LibvirtDriver</font></div><div><font face="times new roman, new york, times, serif">firewall_driver = nova.virt.libvirt.firewall.IptablesFirewallDriver</font></div><div><font face="times new roman, new york, times, serif">rpc_backend = nova.openstack.common.rpc.impl_qpid</font></div><div><font face="times new roman, new york, times, serif">rootwrap_config = /etc/nova/rootwrap.conf</font></div><div><font face="times new roman, new york, times, serif">flat_interface = em3</font></div><div><font face="times new roman, new york, times, serif">public_interface = em1</font></div><div><font face="times new roman, new york, times, serif">auth_strategy = keystone</font></div><div><font face="times new roman, new york,
times, serif">qpid_hostname =opst01</font></div><div><font face="times new roman, new york, times, serif">glance_api_servers = optst01:9292</font></div><div><font face="times new roman, new york, times, serif">glance_host = opst01</font></div><div><font face="times new roman, new york, times, serif">volume_api_class = nova.volume.cinder.API</font></div><div><font face="times new roman, new york, times, serif">enabled_apis = ec2,osapi_compute,metadata</font></div><div><font face="times new roman, new york, times, serif">network_api_class = nova.network.quantumv2.api.API</font></div><div><font face="times new roman, new york, times, serif">quantum_admin_username = quantum</font></div><div><font face="times new roman, new york, times, serif">quantum_admin_password = quantum</font></div><div><font face="times new roman, new york, times, serif"><span>#quantum_admin_auth_url = <a target="_blank"
href="http://localhost:5000/v2.0/">http://localhost:5000/v2.0/</a></span></font></div><div><font face="times new roman, new york, times, serif"><span>quantum_admin_auth_url = <a target="_blank" href="http://localhost:35357/v2.0/">http://localhost:35357/v2.0/</a></span></font></div><div><font face="times new roman, new york, times, serif">quantum_auth_strategy = keystone</font></div><div><font face="times new roman, new york, times, serif">quantum_admin_tenant_name = service</font></div><div><font face="times new roman, new york, times, serif"><span>quantum_url = <a target="_blank" href="http://opst01:9696/">http://opst01:9696/</a></span></font></div><div><font face="times new roman, new york, times, serif">libvirt_vif_driver = nova.virt.libvirt.vif.QuantumLinuxBridgeVIFDriver</font></div></div><div><font face="times new roman, new york, times, serif"><div>[keystone_authtoken]</div><div>admin_token = 111111111111111</div></font></div><div><font
face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif">/etc/quantum/l3_agent.ini</font></div><div><font face="times new roman, new york, times, serif"><div>[DEFAULT]</div><div>debug = True</div><div>interface_driver = quantum.agent.linux.interface.BridgeInterfaceDriver</div><div>admin_token = 111111111111111</div><div>root_helper = sudo quantum-rootwrap /etc/quantum/rootwrap.conf</div><div>external_network_bridge = </div><div>use_namespaces = False</div><div>router_id = 1a8fd530-56d2-4192-b3fe-1f77651cbf41</div></font></div><div><font face="times new roman, new york, times,
serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif">/etc/quantum/plugin.ini</font></div><div><div><font face="times new roman, new york, times, serif">[VLANS]</font></div><div><font face="times new roman, new york, times, serif">tenant_network_type = vlan</font></div><div><font face="times new roman, new york, times, serif">network_vlan_ranges = physnet1,physnet2:100:199</font></div><div><span style="font-family: 'times new roman', 'new york', times, serif;">[DATABASE]</span></div><div><font face="times new roman, new york, times, serif">sql_connection = mysql://quantum:quantum@optst01/quantum_linux_bridge</font></div><div><font
face="times new roman, new york, times, serif">reconnect_interval = 2</font></div><div><span style="font-family: 'times new roman', 'new york', times, serif;">[LINUX_BRIDGE]</span></div><div><font face="times new roman, new york, times, serif">physical_interface = em1,em3</font></div><div><font face="times new roman, new york, times, serif">physical_interface_mappings = physnet1:em1,physnet2:em3</font></div><div><span style="font-family: 'times new roman', 'new york', times, serif;">[AGENT]</span></div><div><font face="times new roman, new york, times, serif">polling_interval = 2</font></div><div><font face="times new roman, new york, times, serif">root_helper = sudo quantum-rootwrap /etc/quantum/rootwrap.conf</font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font
face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><div>[root@opst01 quantum]# route -n</div><div>Kernel IP routing table</div><div>Destination Gateway Genmask Flags Metric Ref Use Iface</div><div>192.168.151.0 0.0.0.0 255.255.255.0 U 0 0 0 ns-b21309cd-11</div><div>192.168.151.0 0.0.0.0 255.255.255.0 U 0 0 0 qr-ec728fdd-44</div><div>10.38.17.0 0.0.0.0 255.255.255.0 U 0 0 0 qg-28179e3d-dc</div><div>10.38.0.0
0.0.0.0 255.255.0.0 U 0 0 0 brq6b600334-9f</div><div>169.254.0.0 0.0.0.0 255.255.0.0 U 1004 0 0 em3</div><div>0.0.0.0 10.38.0.254 0.0.0.0 UG 100 0 0 brq6b600334-9f</div></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times, serif"><br></font></div><div><font face="times new roman, new york, times,
serif"><div>[root@optst01 quantum]# service iptables status</div><div>Table: nat</div><div>Chain PREROUTING (policy ACCEPT)</div><div>num target prot opt source destination </div><div>1 nova-compute-PREROUTING all -- 0.0.0.0/0 0.0.0.0/0 </div><div>2 quantum-l3-agent-PREROUTING all -- 0.0.0.0/0 0.0.0.0/0 </div><div>3 nova-api-PREROUTING all -- 0.0.0.0/0 0.0.0.0/0 </div><div><br></div><div>Chain POSTROUTING (policy ACCEPT)</div><div>num target prot opt source
destination </div><div>1 nova-compute-POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 </div><div>2 quantum-l3-agent-POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 </div><div>3 quantum-postrouting-bottom all -- 0.0.0.0/0 0.0.0.0/0 </div><div>4 nova-api-POSTROUTING all -- 0.0.0.0/0 0.0.0.0/0 </div><div>5 nova-postrouting-bottom all -- 0.0.0.0/0 0.0.0.0/0
</div><div><br></div><div>Chain OUTPUT (policy ACCEPT)</div><div>num target prot opt source destination </div><div>1 nova-compute-OUTPUT all -- 0.0.0.0/0 0.0.0.0/0 </div><div>2 quantum-l3-agent-OUTPUT all -- 0.0.0.0/0 0.0.0.0/0 </div><div>3 nova-api-OUTPUT all -- 0.0.0.0/0 0.0.0.0/0 </div><div><br></div><div>Chain nova-api-OUTPUT (1 references)</div><div>num target prot opt source destination
</div><div><br></div><div>Chain nova-api-POSTROUTING (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-api-PREROUTING (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-api-float-snat (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-api-snat (1 references)</div><div>num target prot opt source destination </div><div>1 nova-api-float-snat all -- 0.0.0.0/0
0.0.0.0/0 </div><div><br></div><div>Chain nova-compute-OUTPUT (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-compute-POSTROUTING (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-compute-PREROUTING (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-compute-float-snat (1 references)</div><div>num target prot opt source destination
</div><div><br></div><div>Chain nova-compute-snat (1 references)</div><div>num target prot opt source destination </div><div>1 nova-compute-float-snat all -- 0.0.0.0/0 0.0.0.0/0 </div><div><br></div><div>Chain nova-postrouting-bottom (1 references)</div><div>num target prot opt source destination </div><div>1 nova-compute-snat all -- 0.0.0.0/0 0.0.0.0/0 </div><div>2 nova-api-snat all -- 0.0.0.0/0 0.0.0.0/0
</div><div><br></div><div>Chain quantum-l3-agent-OUTPUT (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain quantum-l3-agent-POSTROUTING (1 references)</div><div>num target prot opt source destination </div><div>1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ! ctstate DNAT </div><div><br></div><div>Chain quantum-l3-agent-PREROUTING (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain quantum-l3-agent-float-snat (1 references)</div><div>num
target prot opt source destination </div><div><br></div><div>Chain quantum-l3-agent-snat (1 references)</div><div>num target prot opt source destination </div><div>1 quantum-l3-agent-float-snat all -- 0.0.0.0/0 0.0.0.0/0 </div><div>2 SNAT all -- 192.168.151.0/24 0.0.0.0/0 to:10.38.17.1 </div><div><br></div><div>Chain quantum-postrouting-bottom (1 references)</div><div>num target prot opt source destination </div><div>1
quantum-l3-agent-snat all -- 0.0.0.0/0 0.0.0.0/0 </div><div><br></div><div>Table: filter</div><div>Chain INPUT (policy ACCEPT)</div><div>num target prot opt source destination </div><div>1 nova-compute-INPUT all -- 0.0.0.0/0 0.0.0.0/0 </div><div>2 quantum-l3-agent-INPUT all -- 0.0.0.0/0 0.0.0.0/0 </div><div>3 nova-api-INPUT all -- 0.0.0.0/0 0.0.0.0/0 </div><div><br></div><div>Chain FORWARD (policy ACCEPT)</div><div>num
target prot opt source destination </div><div>1 nova-filter-top all -- 0.0.0.0/0 0.0.0.0/0 </div><div>2 nova-compute-FORWARD all -- 0.0.0.0/0 0.0.0.0/0 </div><div>3 quantum-filter-top all -- 0.0.0.0/0 0.0.0.0/0 </div><div>4 quantum-l3-agent-FORWARD all -- 0.0.0.0/0 0.0.0.0/0 </div><div>5 nova-api-FORWARD all -- 0.0.0.0/0 0.0.0.0/0
</div><div><br></div><div>Chain OUTPUT (policy ACCEPT)</div><div>num target prot opt source destination </div><div>1 nova-filter-top all -- 0.0.0.0/0 0.0.0.0/0 </div><div>2 nova-compute-OUTPUT all -- 0.0.0.0/0 0.0.0.0/0 </div><div>3 quantum-filter-top all -- 0.0.0.0/0 0.0.0.0/0 </div><div>4 quantum-l3-agent-OUTPUT all -- 0.0.0.0/0 0.0.0.0/0 </div><div>5 nova-api-OUTPUT
all -- 0.0.0.0/0 0.0.0.0/0 </div><div><br></div><div>Chain nova-api-FORWARD (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-api-INPUT (1 references)</div><div>num target prot opt source destination </div><div>1 ACCEPT tcp -- 0.0.0.0/0 10.38.15.251 tcp dpt:8775 </div><div><br></div><div>Chain nova-api-OUTPUT (1 references)</div><div>num target prot opt source destination
</div><div><br></div><div>Chain nova-api-local (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-compute-FORWARD (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-compute-INPUT (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-compute-OUTPUT (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-compute-inst-20 (1 references)</div><div>num
target prot opt source destination </div><div>1 DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID </div><div>2 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED </div><div>3 nova-compute-provider all -- 0.0.0.0/0 0.0.0.0/0 </div><div>4 ACCEPT udp -- 192.168.151.2 0.0.0.0/0 udp spt:67 dpt:68 </div><div>5 ACCEPT all -- 192.168.151.0/24
0.0.0.0/0 </div><div>6 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 </div><div>7 ACCEPT icmp -- 192.168.151.3 0.0.0.0/0 </div><div>8 ACCEPT icmp -- 192.168.151.4 0.0.0.0/0 </div><div>9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 </div><div>10 nova-compute-sg-fallback all -- 0.0.0.0/0 0.0.0.0/0 </div><div><br></div><div>Chain nova-compute-inst-21 (1 references)</div><div>num target
prot opt source destination </div><div>1 DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID </div><div>2 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED </div><div>3 nova-compute-provider all -- 0.0.0.0/0 0.0.0.0/0 </div><div>4 ACCEPT udp -- 192.168.151.2 0.0.0.0/0 udp spt:67 dpt:68 </div><div>5 ACCEPT all -- 192.168.151.0/24 0.0.0.0/0
</div><div>6 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 </div><div>7 ACCEPT icmp -- 192.168.151.3 0.0.0.0/0 </div><div>8 ACCEPT icmp -- 192.168.151.4 0.0.0.0/0 </div><div>9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 </div><div>10 nova-compute-sg-fallback all -- 0.0.0.0/0 0.0.0.0/0 </div><div><br></div><div>Chain nova-compute-local (1 references)</div><div>num target prot opt source
destination </div><div>1 nova-compute-inst-20 all -- 0.0.0.0/0 192.168.151.3 </div><div>2 nova-compute-inst-21 all -- 0.0.0.0/0 192.168.151.4 </div><div><br></div><div>Chain nova-compute-provider (2 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain nova-compute-sg-fallback (2 references)</div><div>num target prot opt source destination </div><div>1 DROP all -- 0.0.0.0/0
0.0.0.0/0 </div><div><br></div><div>Chain nova-filter-top (2 references)</div><div>num target prot opt source destination </div><div>1 nova-compute-local all -- 0.0.0.0/0 0.0.0.0/0 </div><div>2 nova-api-local all -- 0.0.0.0/0 0.0.0.0/0 </div><div><br></div><div>Chain quantum-filter-top (2 references)</div><div>num target prot opt source destination </div><div>1 quantum-l3-agent-local all -- 0.0.0.0/0
0.0.0.0/0 </div><div><br></div><div>Chain quantum-l3-agent-FORWARD (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain quantum-l3-agent-INPUT (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain quantum-l3-agent-OUTPUT (1 references)</div><div>num target prot opt source destination </div><div><br></div><div>Chain quantum-l3-agent-local (1 references)</div><div>num target prot opt source destination
</div><div><br></div></font></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> Razique Mahroua <razique.mahroua@gmail.com><br><b><span style="font-weight: bold;">To:</span></b> Barrow Kwan <barrowkwan@yahoo.com><br><b><span style="font-weight: bold;">Sent:</span></b> Tue, February 26, 2013 6:37:22 AM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: [Openstack] VM guest can't access outside world.<br></font><br>
<base>I think I already saw that issue somewhere... do you use namespaces?<div><br><div>
<span class="Apple-style-span" style="font-size: medium; border-collapse: separate; font-family: 'Lucida Grande'; border-spacing: 0px;"><span class="Apple-style-span" style="font-weight:normal;font-family:Helvetica;"><b style="color:rgb(19, 112, 138);">Razique Mahroua</b></span><span class="Apple-style-span" style="font-weight:normal;font-family:Helvetica;color:rgb(19, 112, 138);"><b> - </b></span><span class="Apple-style-span" style="font-family:Helvetica;"><span class="Apple-style-span" style="font-weight:normal;font-family:Helvetica;"><b style="color:rgb(19, 112, 138);">Nuage & Co</b></span><span class="Apple-style-span" style="border-collapse:separate;font-family:Helvetica;font-style:normal;font-variant:normal;letter-spacing:normal;line-height:normal;orphans:2;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;border-spacing:0px;font-size:medium;"><span class="Apple-style-span" style="color:rgb(0, 0,
0);font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;orphans:2;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;border-collapse:separate;border-spacing:0px;"><span class="Apple-style-span" style="border-collapse:separate;font-variant:normal;letter-spacing:normal;line-height:normal;orphans:2;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;border-spacing:0px;"><div style="font-weight:normal;color:rgb(0, 0, 0);font-family:Helvetica;font-size:medium;font-style:normal;"><font class="Apple-style-span" color="#13708a"><a rel="nofollow" ymailto="mailto:razique.mahroua@gmail.com" target="_blank" href="mailto:razique.mahroua@gmail.com">razique.mahroua@gmail.com</a></font></div><div style="color:rgb(0, 0, 0);font-family:Helvetica;font-size:medium;font-style:normal;"><font class="Apple-style-span"
color="#13708a">Tel : +33 9 72 37 94 15</font></div></span></span></span></span></span><br class="Apple-interchange-newline" style="color:rgb(0, 0, 0);font-family:Arial;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;orphans:2;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"><span><img height="125" width="125" id="3bcf7eb8-1ec9-43b3-8f0f-30c568ab94f1" src="cid:1.2536991465@web181705.mail.ne1.yahoo.com"></span>
</div>
<br><div><div>Le 25 févr. 2013 à 22:37, Barrow Kwan <<a rel="nofollow" ymailto="mailto:barrowkwan@yahoo.com" target="_blank" href="mailto:barrowkwan@yahoo.com">barrowkwan@yahoo.com</a>> a écrit :</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="font-family:Arial;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;orphans:2;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"><div style="margin:0px;font-family:'times new roman', 'new york', times, serif;font-size:12pt;">yes it is<div style="margin:0px;"><br></div><div style="margin:0px;"><div style="margin:0px;"> grep --color forward /etc/sysctl.conf </div><div style="margin:0px;"># Controls IP packet forwarding</div><div style="margin:0px;">net.ipv4.ip_forward = 1</div><div style="margin:0px;"><br></div><div style="margin:0px;"><br></div><div
style="margin:0px;"><br></div><div style="margin:0px;font-family:'times new roman', 'new york', times, serif;font-size:12pt;"><br><div style="margin:0px;font-family:'times new roman', 'new york', times, serif;font-size:12pt;"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight:bold;">From:</span></b><span class="Apple-converted-space"> </span>Razique Mahroua <<a rel="nofollow" ymailto="mailto:razique.mahroua@gmail.com" target="_blank" href="mailto:razique.mahroua@gmail.com">razique.mahroua@gmail.com</a>><br><b><span style="font-weight:bold;">To:</span></b><span class="Apple-converted-space"> </span>Barrow Kwan <<a rel="nofollow" ymailto="mailto:barrowkwan@yahoo.com" target="_blank" href="mailto:barrowkwan@yahoo.com">barrowkwan@yahoo.com</a>><br><b><span style="font-weight:bold;">Cc:</span></b><span class="Apple-converted-space"> </span><a rel="nofollow" ymailto="mailto:openstack@lists.launchpad.net"
target="_blank" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br><b><span style="font-weight:bold;">Sent:</span></b><span class="Apple-converted-space"> </span>Mon, February 25, 2013 1:33:09 PM<br><b><span style="font-weight:bold;">Subject:</span></b><span class="Apple-converted-space"> </span>Re: [Openstack] VM guest can't access outside world.<br></font><br><div style="margin:0px;">Hi</div>Is the Ip forwarding enabled on the server?<div style="margin:0px;"><br><div style="margin:0px;"><span class="Apple-style-span" style="font-size:medium;border-collapse:separate;font-family:'Lucida Grande';border-spacing:0px;"><span class="Apple-style-span" style="font-weight:normal;font-family:Helvetica;"><b style="color:rgb(19, 112, 138);">Razique Mahroua</b></span><span class="Apple-style-span" style="font-weight:normal;font-family:Helvetica;color:rgb(19, 112, 138);"><b> - </b></span><span
class="Apple-style-span" style="font-family:Helvetica;"><span class="Apple-style-span" style="font-weight:normal;font-family:Helvetica;"><b style="color:rgb(19, 112, 138);">Nuage & Co</b></span><span class="Apple-style-span" style="border-collapse:separate;font-family:Helvetica;font-style:normal;font-variant:normal;letter-spacing:normal;line-height:normal;orphans:2;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;border-spacing:0px;font-size:medium;"><span class="Apple-style-span" style="font-family:Helvetica;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;orphans:2;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;border-collapse:separate;border-spacing:0px;"><span class="Apple-style-span"
style="border-collapse:separate;font-variant:normal;letter-spacing:normal;line-height:normal;orphans:2;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;border-spacing:0px;"><div style="margin:0px;font-weight:normal;font-family:Helvetica;font-size:medium;font-style:normal;"><font class="Apple-style-span" color="#13708a"><a rel="nofollow" ymailto="mailto:razique.mahroua@gmail.com" target="_blank" href="mailto:razique.mahroua@gmail.com">razique.mahroua@gmail.com</a></font></div><div style="margin:0px;font-family:Helvetica;font-size:medium;font-style:normal;"><font class="Apple-style-span" color="#13708a">Tel : +33 9 72 37 94 15</font></div></span></span></span></span></span><br class="Apple-interchange-newline"
style="font-family:Arial;font-size:medium;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;orphans:2;text-indent:0px;text-transform:none;white-space:normal;widows:2;word-spacing:0px;"><span><NUAGECO-LOGO-Fblan_petit.jpg></span></div><br><div style="margin:0px;"><div style="margin:0px;">Le 25 févr. 2013 à 22:15, Barrow Kwan <<a rel="nofollow" ymailto="mailto:barrowkwan@yahoo.com" target="_blank" href="mailto:barrowkwan@yahoo.com">barrowkwan@yahoo.com</a>> a écrit :</div><br class="Apple-interchange-newline"><blockquote type="cite">Hi,<br>I just installed Folsom on CentOS 6.3 ( single host with two NIC ). I can<span class="Apple-converted-space"> </span><br>launch VM fine and VM get an IP address. I associate a floating IP, create<span class="Apple-converted-space"> </span><br>security group to allow ssh and I can ssh to the VM with the floating IP ( from<span
class="Apple-converted-space"> </span><br>a non-openstack node on the same physical network ). What could be wrong on my<span class="Apple-converted-space"> </span><br>setup ? I am using Quantum with linuxbridge.<br><br>thanks<br><br>_______________________________________________<br>Mailing list:<span class="Apple-converted-space"> </span><a rel="nofollow" target="_blank" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>Post to :<span class="Apple-converted-space"> </span><a rel="nofollow" ymailto="mailto:openstack@lists.launchpad.net" target="_blank" href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>Unsubscribe :<span class="Apple-converted-space"> </span><a rel="nofollow" target="_blank" href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>More help :<span
class="Apple-converted-space"> </span><a rel="nofollow" target="_blank" href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a></blockquote></div></div></div></div></div></div></div></blockquote></div><br></div></div></div><div style="color: black; font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; position: fixed;"></div>
</div></body></html>