<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252"><div>Thanks James! You're right, my VM isn't getting an IP address from the dhcp server. I'm trying to work through that now. <br>
<br>
Tyler<br>
<br>
<font color="#888888"><font color="#888888">Sent from my android device.</font></font><br><br>-----Original Message-----<br>From: James Denton <james.denton@rackspace.com><br>To: Tyler Couto <tcouto@certain.com><br>Cc: Andreas Scheuring <scheuran@linux.vnet.ibm.com>, "openstack@lists.openstack.org" <openstack@lists.openstack.org><br>Sent: Tue, 17 Nov 2015 12:58 PM<br>Subject: Re: [Openstack] Trouble connecting to a new VM<br><br></div>Hi Tyler,
<br>
<br>
You might try verifying that the instance properly received its IP address. You can try using nova console-log <id> to view the console log of the instance. Look for the cloud-init info. Also, take a look at the syslog of the network node to see if the DHCP request made it and was acknowledged. If it looks like it got its IP, try hitting the instance from within the DHCP or router namespace to see if you can hit the fixed IP from something in the same network before trying to hit the floating IP. You may also want to run some packet captures on the respective qbr bridge and physical interfaces while doing these tests to see if/where traffic is getting dropped.
<br>
<br>
James
<br>
<br>
> On Nov 17, 2015, at 11:31 AM, Tyler Couto <<a href="mailto:tcouto@certain.com">tcouto@certain.com</a>> wrote:
<br>
>
<br>
> Thanks Andreas. My security groups do allow icmp traffic.
<br>
> +---------+----------------------------------------------------------------
<br>
> ------+
<br>
> | name | security_group_rules
<br>
> |
<br>
> +---------+----------------------------------------------------------------
<br>
> ------+
<br>
> | default | egress, IPv4
<br>
> |
<br>
> | | egress, IPv6
<br>
> |
<br>
> | | ingress, IPv4, 22/tcp, remote_ip_prefix: 0.0.0.0/0
<br>
> |
<br>
> | | ingress, IPv4, icmp, remote_ip_prefix: 0.0.0.0/0
<br>
> |
<br>
> | | ingress, IPv4, remote_group_id:
<br>
> d404679b-aeed-4d2f-bea9-2c7d19ff3fb1 |
<br>
> | | ingress, IPv6, remote_group_id:
<br>
> d404679b-aeed-4d2f-bea9-2c7d19ff3fb1 |
<br>
> +---------++
<br>
>
<br>
> I canΉt access my VMΉs console, so I do not know whether I can ping from
<br>
> my VM. I figured this might be a related issue. I receive this error on
<br>
> when trying to access the noVNC console:
<br>
> Failed to connect to server (code: 1006)
<br>
>
<br>
>
<br>
> This is a two node setup. I have one controller/neutron-network node.
<br>
> HereΉs the output of 'ovs-vsctl showΉ:
<br>
>
<br>
> Bridge br-tun
<br>
> fail_mode: secure
<br>
> Port "gre-ac10183d"
<br>
> Interface "gre-ac10183d"
<br>
> type: gre
<br>
> options: {df_default="true", in_key=flow, local_ip="<a href="http://172.16.24.60">172.16.24.60</a>",
<br>
> out_key=flow, remote_ip="<a href="http://172.16.24.61">172.16.24.61</a>"}
<br>
> Port gre-mirror
<br>
> Interface gre-mirror
<br>
> Port br-tun
<br>
> Interface br-tun
<br>
> type: internal
<br>
> Port patch-int
<br>
> Interface patch-int
<br>
> type: patch
<br>
> options: {peer=patch-tun}
<br>
> Bridge br-ex
<br>
> Port "enp4s0f0"
<br>
> Interface "enp4s0f0"
<br>
> Port phy-br-ex
<br>
> Interface phy-br-ex
<br>
> type: patch
<br>
> options: {peer=int-br-ex}
<br>
> Port br-ex
<br>
> Interface br-ex
<br>
> type: internal
<br>
> Port "enp4s0f1"
<br>
> Interface "enp4s0f1"
<br>
> Bridge br-int
<br>
> fail_mode: secure
<br>
> Port "qr-a81f0614-0e"
<br>
> tag: 2
<br>
> Interface "qr-a81f0614-0e"
<br>
> type: internal
<br>
> Port "qg-289ea4d2-29"
<br>
> tag: 5
<br>
> Interface "qg-289ea4d2-29"
<br>
> type: internal
<br>
> Port br-int
<br>
> Interface br-int
<br>
> type: internal
<br>
> Port patch-tun
<br>
> Interface patch-tun
<br>
> type: patch
<br>
> options: {peer=patch-int}
<br>
> Port int-br-ex
<br>
> Interface int-br-ex
<br>
> type: patch
<br>
> options: {peer=phy-br-ex}
<br>
> Port "tap468d3ee4-c0"
<br>
> tag: 4095
<br>
> Interface "tap468d3ee4-c0"
<br>
> type: internal
<br>
> ovs_version: "2.3.1"
<br>
>
<br>
>
<br>
> I have on compute node. HereΉs the output of 'ovs-vsctl show':
<br>
>
<br>
> Bridge br-int
<br>
> fail_mode: secure
<br>
> Port "qvoc6d01e4b-1d"
<br>
> tag: 1
<br>
> Interface "qvoc6d01e4b-1d"
<br>
> Port br-int
<br>
> Interface br-int
<br>
> type: internal
<br>
> Port patch-tun
<br>
> Interface patch-tun
<br>
> type: patch
<br>
> options: {peer=patch-int}
<br>
> Bridge br-tun
<br>
> fail_mode: secure
<br>
> Port br-tun
<br>
> Interface br-tun
<br>
> type: internal
<br>
> Port patch-int
<br>
> Interface patch-int
<br>
> type: patch
<br>
> options: {peer=patch-tun}
<br>
> Port "gre-ac10183c"
<br>
> Interface "gre-ac10183c"
<br>
> type: gre
<br>
> options: {df_default="true", in_key=flow, local_ip="<a href="http://172.16.24.61">172.16.24.61</a>",
<br>
> out_key=flow, remote_ip="<a href="http://172.16.24.60">172.16.24.60</a>"}
<br>
> Port gre-mirror
<br>
> Interface gre-mirror
<br>
> Port "tap0"
<br>
> Interface "tap0"
<br>
> ovs_version: "2.3.1"
<br>
>
<br>
>
<br>
> I also have a laptop on the same network as the openstack machines. I can
<br>
> successfully ping the interface of the neutron router from my laptop.
<br>
>
<br>
> As far as the physical interfaces, I am only using one physical interface
<br>
> on each openstack machine. I know this is not the recommended setup, but
<br>
> since this is only a POC, I wanted to keep it simple.
<br>
>
<br>
> -Tyler
<br>
>
<br>
>
<br>
>
<br>
> On 11/17/15, 12:48 AM, "Andreas Scheuring" <<a href="mailto:scheuran@linux.vnet.ibm.com">scheuran@linux.vnet.ibm.com</a>>
<br>
> wrote:
<br>
>
<br>
>> ease check your Security Groups first.
<br>
>
<br>
>
<br>
> _______________________________________________
<br>
> Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
<br>
> Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>
<br>
> Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
<br>
<br>