<div dir="ltr">Hi Olivier,<div><br></div><div>I'm not running on virtual box - I have a 2 NIC setup using Neutron networking with 1 interface dedicated to "public" access and one interface split into tenant VLANs plus a 'service' vlan (so that compute and storage nodes exist entirely on this service vlan and not on the public network at all).</div>
<div><br></div><div>Here's my netstat, you can see that eth0 and eth1 are in promiscuous mode, but these were setup this way manually in my /etc/network/interfaces definitions:</div><div><br></div><div><div>auto eth0</div>
<div>iface eth0 inet manual</div><div> pre-up ifconfig $IFACE up promisc</div><div> post-down ifconfig $IFACE down</div></div><div><br></div><div><div>auto eth1</div><div>iface eth1 inet manual</div><div> pre-up ifconfig $IFACE up promisc</div>
<div> post-down ifconfig $IFACE down</div></div><div><br></div><div><br></div><div><div>Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg</div><div>br-backend 1500 0 8178788 0 0 0 8 0 0 0 BRU</div>
<div>br-int 1500 0 24796 0 0 0 8 0 0 0 BRU</div><div>br-os-service 1500 0 25600082 0 0 0 54114 0 0 0 BRU</div><div>br-public 1500 0 17868912 0 0 0 25942023 0 0 0 BRU</div>
<div>eth0 1500 0 120848297 0 0 0 93801692 0 0 0 BMPRU</div><div>eth1 1500 0 61922332 0 0 0 29232624 0 0 0 BMPRU</div><div>int-br-backend 1500 0 25954734 0 0 0 13805666 0 0 0 BMRU</div>
<div>lo 65536 0 253792580 0 0 0 253792580 0 0 0 LRU</div></div><div><br></div><div><br></div><div>You shouldn't run into this issue with virtualbox handling your eth separation, but should you try to make vlan-based interfaces on the host and use multiple vlan interfaces in different openvswitch bridges, openvswitch will silently fail to add all but one of the interfaces. It will actually look like it's added unless you dive into the logs or the flow tables. There are a couple extra bridge interfaces that I use here to work around the issue, but the simplest thing is to avoid using OS level interfaces for vlans.</div>
<div><br></div><div>Other than that, openvswitch and neutron are both pretty fickle at times. My best advice is to get in the habit of restarting openvswitch-switch, neutron-l3-agent and neutron-plugin-openvswitch-agent any time you make changes. Otherwise it can be pretty frustrating to spend 20 minutes tracing packets through ports and bridges just to find out one component or another never picked up a change.</div>
<div><br></div><div>-Andrew</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Aug 19, 2014 at 8:33 AM, Olivier Cant <span dir="ltr"><<a href="mailto:olivier.cant@exxoss.com" target="_blank">olivier.cant@exxoss.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
Hi list,<br>
<br>
I've been trying to set up an external network for a few days and
this driving me crazy. I have a topology close to the one described
in the ubuntu 14.04 documentation for icehouse (using networking not
legacy)<br>
<br>
My setup is completely running under vitrualbox as this is just a
POC at the moment, I have checked that my neutron node is allowed to
put its network interface in promiscuous mode which seem to be the
case but none of the interface on my neutron node actualy get put in
promisc mode.<br>
<br>
My external network is <a href="http://192.168.199.0/24" target="_blank">192.168.199.0/24</a> (I don't have a public
network available) and I have an external router providing gateway
on 192.168.199.1. my pool is defined from .101 to .150<br>
However I cannot ping .101 from the external router. I have tried
adding an extra network interface to the neutron node plugged in on
the same network as the external router (.45) and from that one I
can ping the router just fine.<br>
<br>
My questions are :<br>
Is it normal that none of the neutron node interface are in promisc
mode ?<br>
<br>
oot@os-network:~# netstat -i<br>
Kernel Interface table<br>
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP
TX-OVR Flg<br>
br-ex 1500 0 11 0 0 0 8
0 0 0 BRU<br>
br-int 1500 0 22 0 0 0 8
0 0 0 BRU<br>
br-tun 1500 0 0 0 0 0 8
0 0 0 BRU<br>
eth0 1500 0 12199 0 0 0 3959
0 0 0 BMRU<br>
eth1 1500 0 1338 0 0 0 1940
0 0 0 BMRU<br>
eth2 1500 0 2 0 0 0 18
0 0 0 BMRU<br>
eth3 1500 0 15 0 0 0 17
0 0 0 BMRU<br>
eth4 1500 0 9 0 0 0 14
0 0 0 BMRU<br>
lo 65536 0 18 0 0 0 18
0 0 0 LRU<br>
<br>
Do you have any poitner or direction I can follow to troubleshoot
this ?<br>
<br>
Thanks already for your help<br>
<br>
Cheers,<br>
<br>
Olivier<span class="HOEnZb"><font color="#888888"><br>
<div>-- <br>
<br>
<br>
<div style="min-width:960px;min-height:82px;line-height:18px;margin:6px 0;padding:8px;border-top:1px #999999 dotted;border-bottom:1px #999999 dotted;font-family:'Lucida Grande',Verdana,Arial,Sans-Serif;font-size:12px;color:#999999">
<a href="http://www.exxoss.com" title="exxoss.com" target="_blank"><img src="cid:part1.02030304.05010703@exxoss.com" alt="Exxoss" style="float:left;padding:2px 6px 0pt 0pt;border:medium none"></a>
<div style="padding:6px 0 0 0">
<span style="font-size:14px"><strong style="color:#333333">Olivier
Cant</strong>, CEO |</span> Gsm: <a href="tel:%2B32%280%29497%2F64.18.22" value="+32497641822" target="_blank">+32(0)497/64.18.22</a><br>
<strong><a href="http://www.exxoss.com" title="exxoss.com" style="color:#228bc0;text-decoration:none;border-bottom:1px #cccccc dotted" target="_blank">Exxoss, SPRL</a></strong><br>
Rue de la station, 2, 4347, Fexhe-le-haut-clocher | Telephone:
<a href="tel:%2B32%280%294%2F341.25.81" value="+3243412581" target="_blank">+32(0)4/341.25.81</a> | Fax: <a href="tel:%2B32%280%294%2F371.94.06" value="+3243719406" target="_blank">+32(0)4/371.94.06</a><br>
<a href="http://twitter.com/exxossIT" target="_blank"><img src="cid:part4.03040508.03020909@exxoss.com" alt="Twitter" style="float:left;margin:2px 4px 0 0;border:none"></a>
<a href="http://facebook.com/exxoss" target="_blank"><img src="cid:part6.05030008.07090904@exxoss.com" alt="Facebook" style="float:left;margin:2px 4px 0 0;border:none"></a>
<a href="https://www.linkedin.com/company/exxoss" target="_blank"><img src="cid:part8.08080300.04040706@exxoss.com" alt="Linked
In" style="float:left;margin:2px 4px 0 0;border:none"></a>
</div>
</div>
<br>
<br>
</div>
</font></span></div>
<br>_______________________________________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr">Andrew Mann<div>DivvyCloud Inc.</div><div><a href="http://www.divvycloud.com" target="_blank">www.divvycloud.com</a></div></div>
</div>