<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">not sure how you build your public network.. but usually it does not do dhcp. So those are details that are needed in order for us to give you solutions / options / checking etc based on what you are running, how it was configured etc.. <div class=""><br class=""></div><div class="">CentOS, Ubuntu, scripting just as an example..</div><div class=""><br class=""></div><div class="">Remo <br class=""><div><blockquote type="cite" class=""><div class="">On May 2, 2016, at 22:02, Jagga <<a href="mailto:jagga13@gmail.com" class="">jagga13@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="content-type" content="text/html; charset=utf-8" class=""><div dir="auto" class=""><div class="">That is what I thought but it does not seem to be working this way. How would I check our snat namespace and what specifically should I be looking for? My apologies but am very new to openstack.</div><div class=""><br class=""></div><div class="">Thanks.<br class=""><br class=""></div><div class=""><br class="">On May 2, 2016, at 9:51 PM, Dileep Varma Bairraju <<a href="mailto:varma123@gmail.com" class="">varma123@gmail.com</a>> wrote:<br class=""><br class=""></div><blockquote type="cite" class=""><div class=""><div dir="ltr" class="">Hi Jagga,<div class=""><br class=""></div><div class="">I don't think that's the right approach.Floating ip will effectively do a 1:1 NAT for a given a vm to reach external resources. But, there should be a ip from the external network that gets assigned to SNAT namespace on network node, this effectively will let all vm's (without floating ip) access external resources.</div><div class=""><br class=""></div><div class="">I'd suggest you check at your snat namespace for possible issues, as you seem to have patched the problem for that vm with floating ip's.</div><div class=""><br class=""></div><div class="">> <span style="font-family: arial, helvetica, sans-serif; line-height: 22px;" class="">Is that by design or is there something wrong with our configuration?</span></div><div class=""><span style="font-family: arial, helvetica, sans-serif; line-height: 22px;" class="">As per design, you don't need to assign floating ip's for your vm's to get out, this should be done by SNAT by default as mentioned earlier, where all the vm's internal ip space maps one external ip.</span></div><div class=""><br class=""></div><div class="">Regards,</div><div class="">Dileep</div></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On Mon, May 2, 2016 at 8:32 PM, Jagga Soorma <span dir="ltr" class=""><<a href="mailto:jagga13@gmail.com" target="_blank" class="">jagga13@gmail.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class=""><div class=""><font size="2" class=""><span style="font-family:arial,helvetica,sans-serif" class="">Hi Guys,<br class=""><br class=""><span style="font-style: normal; font-variant-ligatures: normal; font-variant-position: normal; font-variant-caps: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; font-weight: normal; letter-spacing: normal; line-height: 22px; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; float: none; background-color: rgb(255, 255, 255); display: inline !important;" class="">Need some clarification regarding routing for instances without a floating ip address. Basically we have instances connected to a priv network that is also connected to our external network and our security group allows all egress traffic. However, we can't seem to get to any resource on our external network till a floating ip address is assigned. Once we assign a floating ip address we can get out. Is that by design or is there something wrong with our configuration?</span></span></font><br class=""><br class=""></div>Thanks.<br class=""></div>
<br class="">_______________________________________________<br class="">
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class="">
Post to : <a href="mailto:openstack@lists.openstack.org" class="">openstack@lists.openstack.org</a><br class="">
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" rel="noreferrer" target="_blank" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class="">
<br class=""></blockquote></div><br class=""><br clear="all" class=""><div class=""><br class=""></div>-- <br class=""><div class="gmail_signature">Regards,<br class="">Dileep V Bairraju</div>
</div>
</div></blockquote>
!DSPAM:1,572831b2317776163816806!
</div>
_______________________________________________<br class="">Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class="">Post to : <a href="mailto:openstack@lists.openstack.org" class="">openstack@lists.openstack.org</a><br class="">Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br class=""><br class=""><br class="">!DSPAM:1,572831b2317776163816806!<br class=""></div></blockquote></div><br class=""></div></body></html>