<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle22
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle23
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="IS" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">OK, so I ran the command you sent me , and now it looks it‘s allowed,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Controller:
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/# iptables -L -nv --line-numbers<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain INPUT (policy ACCEPT 6437 packets, 2609K bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 54411 17M nova-api-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 0 0 ACCEPT 47 -- * * 172.22.15.0/24 172.22.15.0/24<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 nova-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 0 0 nova-api-FORWARD all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain OUTPUT (policy ACCEPT 6228 packets, 2573K bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 51439 16M nova-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 51439 16M nova-api-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-api-FORWARD (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-api-INPUT (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 ACCEPT tcp -- * * 0.0.0.0/0 172.22.14.22 tcp dpt:8775<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-api-OUTPUT (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-api-local (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-filter-top (2 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 51439 16M nova-api-local all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/#<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Network:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@network2:/# iptables -L -nv --line-numbers<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain INPUT (policy ACCEPT 8 packets, 512 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 2215 700K neutron-openvswi-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 0 0 ACCEPT 47 -- * * 172.22.15.0/24 172.22.15.0/24<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 neutron-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 0 0 neutron-openvswi-FORWARD all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain OUTPUT (policy ACCEPT 5 packets, 664 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 1827 332K neutron-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 1827 332K neutron-openvswi-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-filter-top (2 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 1827 332K neutron-openvswi-local all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-FORWARD (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-INPUT (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-OUTPUT (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-local (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-sg-chain (0 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-sg-fallback (0 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@network2:/#<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">compute:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@compute5:/# iptables -L -nv --line-numbers<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain INPUT (policy ACCEPT 24 packets, 7092 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:53<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 0 0 ACCEPT 47 -- * * 172.22.15.0/24 172.22.15.0/24<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">3 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:53<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">4 0 0 ACCEPT udp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:67<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">5 0 0 ACCEPT tcp -- virbr0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:67<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 ACCEPT all -- * virbr0 0.0.0.0/0 192.168.122.0/24 ctstate RELATED,ESTABLISHED<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 0 0 ACCEPT all -- virbr0 * 192.168.122.0/24 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">3 0 0 ACCEPT all -- virbr0 virbr0 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">4 0 0 REJECT all -- * virbr0 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">5 0 0 REJECT all -- virbr0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain OUTPUT (policy ACCEPT 14 packets, 2340 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 ACCEPT udp -- * virbr0 0.0.0.0/0 0.0.0.0/0 udp dpt:68<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">I tried once more to create an instance, but if failed as well<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Best regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Yngvi<o:p></o:p></span></p>
<p class="MsoNormal"><a name="_MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></a></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Uwe Sauter [mailto:uwe.sauter.de@gmail.com]
<br>
<b>Sent:</b> 29. júní 2015 23:01<br>
<b>To:</b> Yngvi Páll Þorfinnsson; YANG LI<br>
<b>Cc:</b> openstack@lists.openstack.org<br>
<b>Subject:</b> RE: [Openstack] network question on openstack installation<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">I'm not sure if there is something wrong but on both hosts I don't see any rule that accepts GRE traffic. You need to allow GRE traffic on your internal network so that tunneling can actually work. Without that
it's like having your network configured but not plugged in...<o:p></o:p></p>
<div>
<p class="MsoNormal">Am 30. Juni 2015 00:50:28 MESZ, schrieb "Yngvi Páll Þorfinnsson" <<a href="mailto:yngvith@siminn.is">yngvith@siminn.is</a>>:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Network node:<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@network2:/# iptables -L -nv --line-numbers<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain INPUT (policy ACCEPT 1286 packets, 351K bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 1171 338K neutron-openvswi-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 neutron-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 0 0 neutron-openvswi-FORWARD all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain OUTPUT (policy ACCEPT 1124 packets, 180K bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 988 164K neutron-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 988 164K neutron-openvswi-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-filter-top (2 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 988 164K neutron-openvswi-local all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-FORWARD (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-INPUT (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-OUTPUT (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-local (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-sg-chain (0 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain neutron-openvswi-sg-fallback (0 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@network2:/#<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Controller node<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/# iptables -L -nv --line-numbers<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain INPUT (policy ACCEPT 25498 packets, 7540K bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 25498 7540K nova-api-INPUT all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 nova-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 0 0 nova-api-FORWARD all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain OUTPUT (policy ACCEPT 24216 packets, 7244K bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 24216 7244K nova-filter-top all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2 24216 7244K nova-api-OUTPUT all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-api-FORWARD (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-api-INPUT (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 0 0 ACCEPT tcp -- * * 0.0.0.0/0 172.22.14.22 tcp dpt:8775<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-api-OUTPUT (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-api-local (1 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Chain nova-filter-top (2 references)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">num pkts bytes target prot opt in out source destination<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">1 24216 7244K nova-api-local all -- * * 0.0.0.0/0 0.0.0.0/0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/#<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Uwe Sauter [<a href="mailto:uwe.sauter.de@gmail.com">mailto:uwe.sauter.de@gmail.com</a>]
<br>
<b>Sent:</b> 29. júní 2015 22:46<br>
<b>To:</b> Yngvi Páll Þorfinnsson; YANG LI<br>
<b>Cc:</b> <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
<b>Subject:</b> RE: [Openstack] network question on openstack installation<o:p></o:p></span></p>
</div>
</div>
<p> <o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">One more thing. Please provide<br>
<br>
iptables -L -nv --line-numbers<br>
<br>
for network and compute nodes.<o:p></o:p></p>
<div>
<p class="MsoNormal">Am 30. Juni 2015 00:25:45 MESZ, schrieb "Yngvi Páll Þorfinnsson" <<a href="mailto:yngvith@siminn.is">yngvith@siminn.is</a>>:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">In fact, I don‘t think I‘ll need more than one „external network“<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">so, am I on the wrong path here, i.e. when I‘m configuing the external network as a VLAN ?<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Best regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Yngvi<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Yngvi Páll Þorfinnsson
<br>
<b>Sent:</b> 29. júní 2015 21:57<br>
<b>To:</b> Uwe Sauter; YANG LI<br>
<b>Cc:</b> <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
<b>Subject:</b> Re: [Openstack] network question on openstack installation<o:p></o:p></span></p>
</div>
</div>
<p> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">OK, I only found one fresh error
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Compute node; nova-compute.log ( as usually when I create instance)<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">grep ERR nova-compute.log<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2015-06-29 21:11:11.801 4166 ERROR nova.compute.manager [-] [instance: af901a2b-2462-4c19-b1f1-237371fd8177] Instance failed to spawn<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">I‘ve attached the neutron agent-show and neutron (sub)net-list in the attached file.<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Best regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Yngvi<o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p><span style="color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Uwe Sauter [<a href="mailto:uwe.sauter.de@gmail.com">mailto:uwe.sauter.de@gmail.com</a>]
<br>
<b>Sent:</b> 29. júní 2015 21:34<br>
<b>To:</b> Yngvi Páll Þorfinnsson; YANG LI<br>
<b>Cc:</b> <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
<b>Subject:</b> RE: [Openstack] network question on openstack installation<o:p></o:p></span></p>
</div>
</div>
<p> <o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Can you check for ERRORs in:<br>
Network node: neutron server log, neutron openvswitch agent log, openvswitch log<br>
Nova controller node: nova api log, nova scheduler log<br>
Compute node: nova compute log, neutron openvswitch agent log, openvswitch log<br>
<br>
Also please list again neutron agent-show for the different agents and neutron net-show and neutron subnet-show for your (sub)networks.<o:p></o:p></p>
<div>
<p class="MsoNormal">Am 29. Juni 2015 23:24:48 MESZ, schrieb "Yngvi Páll Þorfinnsson" <<a href="mailto:yngvith@siminn.is">yngvith@siminn.is</a>>:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Thanks a lot for your effort Uwe ;-)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">It‘s relly helpful !<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Now , I keep creating instances, and have the same error.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">I still get a strange comment in the
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Neutron server.log file when I try to create an instance:<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">2015-06-29 21:11:11.576 1960 DEBUG neutron.plugins.ml2.drivers.mech_openvswitch [req-1e603e4b-61e6-4896-8f81-208daba8569b None] Checking
segment: {'segmentation_id': 1102L, 'physical_network': u'external', 'id': u'11fab5ad-c457-4175-9e5a-f505fc0e072d', 'network_type': u'vlan'} for mappings: {u'external': u'br-ex'} with tunnel_types: [u'gre'] check_segment_for_agent /usr/lib/python2.7/dist-packages/neutron/plugins/ml2/drivers/mech_openvswitch.py:52<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">But still this segment is not listed for ‚neutron net-list‘ nor ‚neutron-subnet-list‘ !<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/# source admin-openrc.sh<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/#<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/# neutron net-list<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">+--------------------------------------+-------------+-----------------------------------------------------+<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">| id | name | subnets |<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">+--------------------------------------+-------------+-----------------------------------------------------+<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">| b43da44a-42d5-4b1f-91c2-d06a923deb29 | ext_net1101 | c40fa8e3-cd8e-4566-ade6-5f3eabed121c 157.157.8.0/24 |<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">| 3446e54b-346f-45e5-89a2-1ec4eef251ab | demo-net | 2c79bb00-0ace-4319-8151-81210ee3dfb2 172.22.18.0/24 |<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">+--------------------------------------+-------------+-----------------------------------------------------+<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/#<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/# neutron subnet-list<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">+--------------------------------------+--------------------+----------------+---------------------------------------------------+<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">| id | name | cidr | allocation_pools |<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">+--------------------------------------+--------------------+----------------+---------------------------------------------------+<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">| c40fa8e3-cd8e-4566-ade6-5f3eabed121c | ext_net1101-subnet | 157.157.8.0/24 | {"start": "157.157.8.51", "end": "157.157.8.250"} |<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">| 2c79bb00-0ace-4319-8151-81210ee3dfb2 | demo-subnet | 172.22.18.0/24 | {"start": "172.22.18.2", "end": "172.22.18.254"} |<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">+--------------------------------------+--------------------+----------------+---------------------------------------------------+<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">And the output of listing it is empty:<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/# neutron net-show 11fab5ad-c457-4175-9e5a-f505fc0e072d<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Unable to find network with name '11fab5ad-c457-4175-9e5a-f505fc0e072d'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/#<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/# source demo-openrc.sh<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">root@controller2:/# neutron net-show 11fab5ad-c457-4175-9e5a-f505fc0e072d<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Unable to find network with name '11fab5ad-c457-4175-9e5a-f505fc0e072d'<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">This is after I have dropped the neutron, and resynced....<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Best regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Yngvi<o:p></o:p></span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"> <o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Uwe Sauter [<a href="mailto:uwe.sauter.de@gmail.com">mailto:uwe.sauter.de@gmail.com</a>]
<br>
<b>Sent:</b> 29. júní 2015 21:16<br>
<b>To:</b> Yngvi Páll Þorfinnsson; YANG LI<br>
<b>Cc:</b> <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
<b>Subject:</b> RE: [Openstack] network question on openstack installation<o:p></o:p></span></p>
</div>
</div>
<p> <o:p></o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Yes. Just keep in mind that if you extend your configuration with a new config file, then you must change your init script / unit file to reference that file. And it would probably be a good idea to re-sync
the DB with that additional file as an option. Or you keep your plugin configuration in a single file and be happy with the current layout.<o:p></o:p></p>
<div>
<p class="MsoNormal">Am 29. Juni 2015 22:47:22 MESZ, schrieb "Yngvi Páll Þorfinnsson" <<a href="mailto:yngvith@siminn.is">yngvith@siminn.is</a>>:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<pre>Hi Uwe<br><br>I just ran this some minutes ago, i.e. did the "population of db" again,<br>According to the manual.<br>Should'nt this be enough ?<br><br><br>root@controller2:/# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #729FCF 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre> --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade juno" neutron<o:p></o:p></pre>
</blockquote>
<pre><br>INFO [alembic.migration] Context impl MySQLImpl.<br>INFO [alembic.migration] Will assume non-transactional DDL.<br>INFO [alembic.migration] Running upgrade None -> havana, havana_initial<br>INFO [alembic.migration] Running upgrade havana -> e197124d4b9, add unique constraint to members<br>INFO [alembic.migration] Running upgrade e197124d4b9 -> 1fcfc149aca4, Add a unique constraint on (agent_type, host) columns to prevent a race<br>condition when an agent<o:p></o:p></pre>
<pre>entry is 'upserted'.<br>INFO [alembic.migration] Running upgrade 1fcfc149aca4 -> 50e86cb2637a, nsx_mappings<br>INFO [alembic.migration] Running upgrade 50e86cb2637a -> 1421183d533f, NSX DHCP/metadata support<br>INFO [alembic.migration] Running upgrade 1421183d533f -> 3d3cb89d84ee, nsx_switch_mappings<br>INFO [alembic.migration] Running upgrade 3d3cb89d84ee -> 4ca36cfc898c, nsx_router_mappings<br>INFO [alembic.migration] Running upgrade 4ca36cfc898c -> 27cc183af192, ml2_vnic_type<br>INFO [alembic.migration] Running upgrade 27cc183af192 -> 50d5ba354c23, ml2 binding:vif_details<br>INFO [alembic.migration] Running upgrade 50d5ba354c23 -> 157a5d299379, ml2 binding:profile<br>INFO [alembic.migration] Running upgrade 157a5d299379 -> 3d2585038b95, VMware NSX rebranding<br>INFO [alembic.migration] Running upgrade 3d2585038b95 -> abc88c33f74f, lb stats<br>INFO <o:p></o:p></pre>
<pre>[alembic.migration]<o:p></o:p></pre>
<pre>Running upgrade abc88c33f74f -> 1b2580001654,<o:p></o:p></pre>
<pre>nsx_sec_group_mapping<br>INFO [alembic.migration] Running upgrade 1b2580001654 -> e766b19a3bb, nuage_initial<br>INFO [alembic.migration] Running upgrade e766b19a3bb -> 2eeaf963a447, floatingip_status<br>INFO [alembic.migration] Running upgrade 2eeaf963a447 -> 492a106273f8, Brocade ML2 Mech. Driver<br>INFO [alembic.migration] Running upgrade 492a106273f8 -> 24c7ea5160d7, Cisco CSR VPNaaS<br>INFO [alembic.migration] Running upgrade 24c7ea5160d7 -> 81c553f3776c, bsn_consistencyhashes<br>INFO [alembic.migration] Running upgrade 81c553f3776c -> 117643811bca, nec: delete old ofc mapping tables<br>INFO [alembic.migration] Running upgrade 117643811bca -> 19180cf98af6, nsx_gw_devices<br>INFO [alembic.migration] Running upgrade 19180cf98af6 -> 33dd0a9fa487, embrane_lbaas_driver<br>INFO [alembic.migration] Running upgrade 33dd0a9fa487 -> 2447ad0e9585, Add IPv6 Subnet properties<br>INFO [alembic.migration] Running upgrade 2447ad0e9585<o:p></o:p></pre>
<pre>-> 538732fa21e1, NEC Rename quantum_id to neutron_id<br>INFO [alembic.migration] Running upgrade 538732fa21e1 -> 5ac1c354a051, n1kv segment allocs for cisco n1kv plugin<br>INFO [alembic.migration] Running upgrade 5ac1c354a051 -> icehouse, icehouse<br>INFO [alembic.migration] Running upgrade icehouse -> 54f7549a0e5f, set_not_null_peer_address<br>INFO [alembic.migration] Running upgrade 54f7549a0e5f -> 1e5dd1d09b22, set_not_null_fields_lb_stats<br>INFO [alembic.migration] Running upgrade 1e5dd1d09b22 -> b65aa907aec, set_length_of_protocol_field<br>INFO [alembic.migration] Running upgrade b65aa907aec -> 33c3db036fe4, set_length_of_description_field_metering<br>INFO [alembic.migration] Running upgrade 33c3db036fe4 -> 4eca4a84f08a, Remove ML2 Cisco Credentials DB<br>INFO [alembic.migration] Running upgrade 4eca4a84f08a -> d06e871c0d5, set_admin_state_up_not_null_ml2<br>INFO <o:p></o:p></pre>
<pre>[alembic.migration] Running upgrade d06e871c0d5 -><o:p></o:p></pre>
<pre>6be312499f9, set_not_null_vlan_id_cisco<br>INFO [alembic.migration] Running upgrade 6be312499f9 -> 1b837a7125a9, Cisco APIC Mechanism Driver<br>INFO [alembic.migration] Running upgrade 1b837a7125a9 -> 10cd28e692e9, nuage_extraroute<br>INFO [alembic.migration] Running upgrade 10cd28e692e9 -> 2db5203cb7a9, nuage_floatingip<br>INFO [alembic.migration] Running upgrade 2db5203cb7a9 -> 5446f2a45467, set_server_default<br>INFO [alembic.migration] Running upgrade 5446f2a45467 -> db_healing, Include all tables and make migrations unconditional.<br>INFO [alembic.migration] Context impl MySQLImpl.<br>INFO [alembic.migration] Will assume non-transactional DDL.<br>INFO [alembic.autogenerate.compare] Detected server default on column 'cisco_ml2_apic_epgs.provider'<br>INFO [alembic.autogenerate.compare] Detected removed index 'cisco_n1kv_vlan_allocations_ibfk_1' on 'cisco_n1kv_vlan_allocations'<br>INFO [alembic.autogenerate.compare] Detected server<o:p></o:p></pre>
<pre>default on column 'cisco_n1kv_vxlan_allocations.allocated'<br>INFO [alembic.autogenerate.compare] Detected removed index 'cisco_n1kv_vxlan_allocations_ibfk_1' on 'cisco_n1kv_vxlan_allocations'<br>INFO [alembic.autogenerate.compare] Detected removed index 'embrane_pool_port_ibfk_2' on 'embrane_pool_port'<br>INFO [alembic.autogenerate.compare] Detected removed index 'firewall_rules_ibfk_1' on 'firewall_rules'<br>INFO [alembic.autogenerate.compare] Detected removed index 'firewalls_ibfk_1' on 'firewalls'<br>INFO [alembic.autogenerate.compare] Detected server default on column 'meteringlabelrules.excluded'<br>INFO [alembic.autogenerate.compare] Detected server default on column 'ml2_port_bindings.host'<br>INFO [alembic.autogenerate.compare] Detected added column 'nuage_routerroutes_mapping.destination'<br>INFO [alembic.autogenerate.compare] Detected added column 'nuage_routerroutes_mapping.nexthop'<br>INFO <o:p></o:p></pre>
<pre>[alembic.autogenerate.compare] Detected server default<o:p></o:p></pre>
<pre>on column 'poolmonitorassociations.status'<br>INFO [alembic.autogenerate.compare] Detected added index 'ix_quotas_tenant_id' on '['tenant_id']'<br>INFO [alembic.autogenerate.compare] Detected NULL on column 'tz_network_bindings.phy_uuid'<br>INFO [alembic.autogenerate.compare] Detected NULL on column 'tz_network_bindings.vlan_id'<br>INFO [neutron.db.migration.alembic_migrations.heal_script] Detected removed foreign key u'nuage_floatingip_pool_mapping_ibfk_2' on table u'nuage_floatingip_pool_mapping'<br>INFO [alembic.migration] Running upgrade db_healing -> 3927f7f7c456, L3 extension distributed mode<br>INFO [alembic.migration] Running upgrade 3927f7f7c456 -> 2026156eab2f, L2 models to support DVR<br>INFO [alembic.migration] Running upgrade 2026156eab2f -> 37f322991f59, removing_mapping_tables<br>INFO [alembic.migration] Running upgrade 37f322991f59 -> 31d7f831a591, add constraint for routerid<br>INFO [alembic.migration] Running upgrade<o:p></o:p></pre>
<pre>31d7f831a591 -> 5589aa32bf80, L3 scheduler additions to support DVR<br>INFO [alembic.migration] Running upgrade 5589aa32bf80 -> 884573acbf1c, Drop NSX table in favor of the extra_attributes one<br>INFO [alembic.migration] Running upgrade 884573acbf1c -> 4eba2f05c2f4, correct Vxlan Endpoint primary key<br>INFO [alembic.migration] Running upgrade 4eba2f05c2f4 -> 327ee5fde2c7, set_innodb_engine<br>INFO [alembic.migration] Running upgrade 327ee5fde2c7 -> 3b85b693a95f, Drop unused servicedefinitions and servicetypes tables.<br>INFO [alembic.migration] Running upgrade 3b85b693a95f -> aae5706a396, nuage_provider_networks<br>INFO [alembic.migration] Running upgrade aae5706a396 -> 32f3915891fd, cisco_apic_driver_update<br>INFO [alembic.migration] Running upgrade 32f3915891fd -> 58fe87a01143, cisco_csr_routing<br>INFO [alembic.migration] Running upgrade 58fe87a01143 -> 236b90af57ab,<o:p></o:p></pre>
<pre>ml2_type_driver_refactor_dynamic_segments<br>INFO <o:p></o:p></pre>
<pre>[alembic.migration] Running upgrade 236b90af57ab -> 86d6d9776e2b, Cisco APIC Mechanism Driver<br>INFO [alembic.migration] Running upgrade 86d6d9776e2b -> 16a27a58e093, ext_l3_ha_mode<br>INFO [alembic.migration] Running upgrade 16a27a58e093 -> 3c346828361e, metering_label_shared<br>INFO [alembic.migration] Running upgrade 3c346828361e -> 1680e1f0c4dc, Remove Cisco Nexus Monolithic Plugin<br>INFO [alembic.migration] Running upgrade 1680e1f0c4dc -> 544673ac99ab, add router port relationship<br>INFO [alembic.migration] Running upgrade 544673ac99ab -> juno, juno<br>root@controller2:/#<br><br>-----Original Message-----<br>From: Uwe Sauter [mailto:<a href="http://uwe.sauter.de">uwe.sauter.de</a>@gmail.com] <br>Sent: 29. júní 2015 20:45<br>To: Yngvi Páll Þorfinnsson; YANG LI<br>Cc: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>Subject: Re: [Openstack] network<o:p></o:p></pre>
<pre>question<o:p></o:p></pre>
<pre>on<o:p></o:p></pre>
<pre>openstack installation<br><br>Go to <a href="http://docs.openstack.org">http://docs.openstack.org</a>/ , select the OpenStack version, then the installation guide for your distribution and navigate to<br><br>6. Add a networking component<br> - OpenStack Networking (neutron)<br> - Install and configure controller node<br><br>and follow the database related stuff:<br>- create DB<br>- grant privileges to neutron user<br>- populate the DB (search for "neutron-db-manage")<br><br>Depending on your distribution, you probably need to use sudo.<br><br>The number of config files depends on the file layout you are working with, so this is not an exact answer.<br><br>I did the following:<br><br>[on controller node]<br><br>cd /etc/neutron<br>cat plugins/ml2/ml2_conf.ini > plugin.ini cd plugins/ml2 rm -f ml2_config.ini ln -s ../../plugin.ini ml2_conf.ini<br><br><br>[on network and compute nodes]<br><br>cd<o:p></o:p></pre>
<pre>/etc/neutron<br>cat plugins/ml2/ml2_conf.ini > plugin.ini cat<o:p></o:p></pre>
<pre>plugins/openvswitch/ovs_neutron_plugin.ini >> plugin.ini cd plugins/ml2 rm -f ml2_config.ini ln -s ../../plugin.ini ml2_conf.ini cd ../openvswitch rm -f ovs_neutron_plugin.ini ln -s ../../plugin.ini ovs_neutron_plugin.ini<br><br><br><br>Then I did that sed trick that is needed on RDO because of a packaging bug with Juno (changes systemd unit file to load /etc/neutron/plugin.ini instead of /etc/neutron/plugins/ml2/ml2_plugin.ini).<br>And then 'su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugin.ini upgrade juno" neutron' on the controller node.<br><br>As far as I understood the configuration system used in Neutron, each config file will be merged into the same configuration namespace; only the order will determine, which value is the current one if they exist in more then one file [] section.<br>So you could have just one ini file in addition to /etc/neutron/neutron.conf (my<o:p></o:p></pre>
<pre>way)<o:p></o:p></pre>
<pre>or<o:p></o:p></pre>
<pre>several. But then you<o:p></o:p></pre>
<pre>need to load them all when sync'ing the DB *and* starting the services.<br><br><br>Hopefully this brightens the dark side of Neutron configuration,<br><br> Uwe<br><br><br><br><br><br>Am 29.06.2015 um 22:19 schrieb Yngvi Páll Þorfinnsson:<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #729FCF 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre> HI Uwe<br> No, I did'nt drop the keystone ;-)<br> <br> But is this the correct way to resync neutron ?<br> <br> # neutron-db-manage --config-file /etc/neutron/neutron.conf \ # <br> --config-file /etc/neutron/plugins/ml2/ml2_plugin.ini<br> <br> I mean, how many config files is necessary to have in the cmd ?<br> <br> best regards<br> Yngvi<br> <br> -----Original Message-----<br> From: Uwe Sauter [mailto:<a href="http://uwe.sauter.de">uwe.sauter.de</a>@gmail.com]<br> Sent: 29. júní 2015 18:08<br> To: YANG LI<br> Cc: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br> Subject: Re:<o:p></o:p></pre>
<pre>[Openstack] network question on openstack installation<br> <br> It depends on your switch… some drop tagged packets on an access port, others allow tagged packets, if the packet VLAN ID equals the configured VLAN ID.<br> <br> I'd reconfigure the provider network type to "flat" but that's <br> personal taste. You could also reconfigure the switch port to be a <br> trunking port (with only one VLAN ID). Currently your in between those <br> configurations that might or might not work lateron…<br> <br> <br> Regards,<br> <br> Uwe<br> <br> <br> Am 29.06.2015 um 19:42 schrieb YANG LI:<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #AD7FA8 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre> thank you, Uwe. our provider network actually is untagged, but I did <br> specified VLAN ID when I create our external network and everything still works. will this cause issue later on?<br><br> eutron net-create --provider:network_type=vlan <br> —provider:segmentation_id=<vlan id><br> --provider:physical_network=physnet1<br> --router:external=true public<br><br><br> Thanks,<br> Yang<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #8AE234 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre style="margin-bottom:12.0pt"> On Jun 27, 2015, at 11:17 AM, Uwe Sauter <<a href="http://uwe.sauter.de">uwe.sauter.de</a>@gmail.com <mailto:<a href="http://uwe.sauter.de">uwe.sauter.de</a>@gmail.com>> wrote:<br><br> Hi Yang,<br><br> it depends on whether your provider network is tagged or untagged. If it is untagged (the switch port is an "access"<br> port) then you don't specify the VLAN ID for the external network <br> (as it will get tagged by the switch). If the provider network is <br> tagged (the switch port is a "trunk" port) then you have to configure the VLAN ID because the switch might refuse the traffic (depending if there is a default VLAN ID defined on the switch's port).<o:p></o:p></pre>
<pre>Regards,<br><br> Uwe<br><br><br><br> Am 27.06.2015 um 13:47 schrieb YANG LI:<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #FCAF3E 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre style="margin-bottom:12.0pt"> Thank you so much, James! This is so helpful. Another confusion I <br> have is about network_vlan_ranges. Is this network VLAN id range? <br> If so, does it has to match external network? For example, we only have one external VLAN we can use as Our provider network and that VLAN id is 775 (xxx.xxx.xxx.0/26). Should I define network_vlan_ranges as following?<br><br> [ml2]<br> type_drivers=vlan<br> tenant_network_types = vlan<br> mechanism_drivers=openvswitch<br> #<br> [ml2_type_vlan]<br> #thistellsOpenstackthattheinternalname"physnet1"providesthevlanrang<br> e<br> 100-199<br> network_vlan_ranges=physnet1:775<br> #<br><br> Thanks,<br> Yang<br> Sent from my iPhone<br><br> On Jun 26, 2015, at 8:54 AM, "James Denton" <o:p></o:p></pre>
<pre style="margin-bottom:12.0pt"><<a href="mailto:james.denton@rackspace.com%20%3cmailto:james.denton@rackspace.com">james.denton@rackspace.com <mailto:james.denton@rackspace.com</a>><br> <<a href="mailto:james.denton@rackspace.com">mailto:james.denton@rackspace.com</a>>> wrote:<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #E9B96E 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre style="margin-bottom:12.0pt"> You can absolutely have instances in the same network span <br> different compute nodes. As an admin, you can run ‘nova show <instanceid>’ and see the host in the output:<br><br> root@controller01:~# nova show <br> 7bb18175-87da-4d1f-8dca-2ef07fee9d21<br> | grep host<br> | OS-EXT-SRV-ATTR:host | compute02 |<br><br> That info is not available to non-admin users by default.<br><br> James<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre style="margin-bottom:12.0pt"> On Jun 26, 2015, at 7:38 AM, YANG LI <<a href="mailto:yangli@clemson.edu%20%0b%20%3cmailto:yangli@clemson.edu">yangli@clemson.edu <br> <mailto:yangli@clemson.edu</a>> <<a href="mailto:yangli@clemson.edu">mailto:yangli@clemson.edu</a>>><o:p></o:p></pre>
<pre style="margin-bottom:12.0pt">wrote:<br><br> Thanks, James for the explanation. it make more sense now. <br> <<a href="http://now.it">http://now.it</a>/> it is possible that a instances on same tenant network reside on different compute nodes right? how do I tell which compute node a instance is on?<br><br> Thanks,<br> Yang<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre style="margin-bottom:12.0pt"> On Jun 24, 2015, at 10:27 AM, James Denton <br> <<a href="mailto:james.denton@rackspace.com%20%3cmailto:james.denton@rackspace.com">james.denton@rackspace.com <mailto:james.denton@rackspace.com</a>><br> <<a href="mailto:james.denton@rackspace.com">mailto:james.denton@rackspace.com</a>>> wrote:<br><br> Hello.<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre> all three nodes will have eth0 on management/api network. since <br> I am using ml2 plugin with vlan for tenant network, I think all <br> compute node should have eth1 as the second nic on provider <br> network. Is this<o:p></o:p></pre>
<pre>correct? I understand provider network is for instance to get external access to internet, but how is instance live on compute1 communicate with instance live on compute2? are they also go through provider network?<o:p></o:p></pre>
</blockquote>
<pre style="margin-bottom:12.0pt"><br> In short, yes. If you’re connecting instances to vlan “provider” <br> networks, traffic between instances on different compute nodes <br> will traverse the “provider bridge”, get tagged out eth1, and <br> hit the physical switching fabric. Your external gateway device could also sit in that vlan, and the default route on the instance would direct external traffic to that device.<br><br> In reality, every network has ‘provider’ attributes that <br> describe the network type, segmentation id, and bridge interface <br> (for vlan/flat only). So tenant networks that leverage vlans <br> would have provider attributes set by Neutron automatically <br> based on the configuration set in the ML2 config file. If you <o:p></o:p></pre>
<pre style="margin-bottom:12.0pt">use Neutron routers that connect to both ‘tenant’ vlan-based networks and external ‘provider’ networks, all of that traffic could traverse the same provider bridge on the controller/network node, but would be tagged accordingly based on the network (ie. vlan 100 for external network, vlan 200 for tenant network).<br><br> Hope that’s not too confusing!<br><br> James<o:p></o:p></pre>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:6.0pt">
<pre style="margin-bottom:12.0pt"> On Jun 24, 2015, at 8:54 AM, YANG LI <<a href="mailto:yangli@clemson.edu%20%0b%20%3cmailto:yangli@clemson.edu">yangli@clemson.edu <br> <mailto:yangli@clemson.edu</a>> <<a href="mailto:yangli@clemson.edu">mailto:yangli@clemson.edu</a>>><br> wrote:<br><br> I am working on install openstack from scratch, but get <br> confused with network part. I want to have one controller node, two compute nodes.<br><br> the controller node will only handle following services:<br> glance-api<br> glance-registry<br> keystone<br> nova-api<br> nova-cert<o:p></o:p></pre>
<pre>nova-conductor<br> nova-consoleauth<br> nova-novncproxy<br> nova-scheduler<br> qpid<br> mysql<br> neutron-server<br><br> compute nodes will have following services:<br> neutron-dhcp-agent<br> neutron-l3-agent<br> neutron-metadata-agent<br> neutron-openvswitch-agent<br> neutron-ovs-cleanup<br> openvswtich<br> nova-compute<br><br> all three nodes will have eth0 on management/api network. since <br> I am using ml2 plugin with vlan for tenant network, I think all <br> compute node should have eth1 as the second nic on provider <br> network. Is this correct? I understand provider network is for instance to get external access to internet, but how is instance live on compute1 communicate with instance live on compute2? are they also go through provider network?<o:p></o:p></pre>
<pre style="text-align:center"><hr size="2" width="100%" align="center"></pre>
<pre><br> Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br> Post to :<o:p></o:p></pre>
<pre><a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a> <<a href="mailto:openstack@lists.openstack.org">mailto:openstack@lists.openstack.org</a>><br> <<a href="mailto:openstack@lists.openstack.org">mailto:openstack@lists.openstack.org</a>><br> Unsubscribe : <br> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><o:p></o:p></pre>
</blockquote>
<p><span style="font-size:10.0pt;font-family:"Courier New""> <o:p></o:p></span></p>
</blockquote>
<p><span style="font-size:10.0pt;font-family:"Courier New""> <o:p></o:p></span></p>
</blockquote>
<p><span style="font-size:10.0pt;font-family:"Courier New""> <o:p></o:p></span></p>
</blockquote>
<p><span style="font-size:10.0pt;font-family:"Courier New""> <o:p></o:p></span></p>
<pre style="text-align:center"><hr size="2" width="100%" align="center"></pre>
<pre><br> Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br> Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a> <<a href="mailto:openstack@lists.openstack.org">mailto:openstack@lists.openstack.org</a>><br> Unsubscribe : <br> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><o:p></o:p></pre>
</blockquote>
<p><span style="font-size:10.0pt;font-family:"Courier New""> <o:p></o:p></span></p>
<pre style="text-align:center"><hr size="2" width="100%" align="center"></pre>
<pre style="margin-bottom:12.0pt"><br> Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><o:p></o:p></pre>
<pre>Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a> <<a href="mailto:openstack@lists.openstack.org">mailto:openstack@lists.openstack.org</a>><br> Unsubscribe : <br> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><o:p></o:p></pre>
</blockquote>
<p><span style="font-size:10.0pt;font-family:"Courier New""> <o:p></o:p></span></p>
</blockquote>
<pre> <o:p></o:p></pre>
<pre style="text-align:center"><hr size="2" width="100%" align="center"></pre>
<pre><br> Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br> Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br> Unsubscribe : <br> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br> <o:p></o:p></pre>
</blockquote>
</blockquote>
</div>
<p> <o:p></o:p></p>
</blockquote>
</div>
<p> <o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><br>
-- <br>
Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.<o:p></o:p></p>
</div>
</body>
</html>