<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">I’ve completely reinstalled my OS setup, more or less from scratch<div class="">(I’ve kept my bootstrapping script, modified for this new install).</div><div class=""><br class=""></div><div class="">It’s now on Debian GNU/Linux Stretch, which come with Newton.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">I’ve setup my router (extern net IP: 10.0.6.1), with my “real” router/nat/firewall</div><div class="">on 10.0.6.254. I’m routing 10.0.6.0/24 and 10.0.8.0/21 to 10.0.6.1.</div><div class=""><br class=""></div><div class="">The instance get the IP 10.0.8.13 and I’ve setup security groups to allow everything,</div><div class="">but I can’t ping or access the instance.</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>[celia.pts/5]$ traceroute -n 10.0.8.13<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>traceroute to 10.0.8.13 (10.0.8.13), 30 hops max, 60 byte packets<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span> 1 192.168.69.1 0.218 ms 0.193 ms 0.169 ms<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span> 2 10.0.6.1 0.753 ms * *<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span> 3 10.0.6.1 3067.663 ms !H 3067.666 ms !H 3067.622 ms !H</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>[celia.pts/5]$ ping -c1 10.0.6.1<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>PING 10.0.6.1 (10.0.6.1) 56(84) bytes of data.<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>64 bytes from 10.0.6.1: icmp_req=1 ttl=63 time=0.635 ms<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>--- 10.0.6.1 ping statistics ---<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>1 packets transmitted, 1 received, 0% packet loss, time 0ms<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>rtt min/avg/max/mdev = 0.635/0.635/0.635/0.000 ms</div><div class=""><br class=""></div><div class="">The 10.0.8.0/24 subnet the instance is attached to have the default GW</div><div class="">to 10.0.4.254 and the router it ‘hangs’ of on have that IP and I can ping</div><div class="">that just fine from the ‘outside’:</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>[celia.pts/5]$ ping -c1 10.0.8.254<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>PING 10.0.8.254 (10.0.8.254) 56(84) bytes of data.<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>64 bytes from 10.0.8.254: icmp_req=1 ttl=62 time=0.740 ms<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span><br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>--- 10.0.8.254 ping statistics ---<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>1 packets transmitted, 1 received, 0% packet loss, time 0ms<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>rtt min/avg/max/mdev = 0.740/0.740/0.740/0.000 ms<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>[celia.pts/5]$ traceroute -n 10.0.8.254<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span>traceroute to 10.0.8.254 (10.0.8.254), 30 hops max, 60 byte packets<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span> 1 192.168.69.1 0.096 ms 0.084 ms 0.066 ms<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span> 2 10.0.6.1 0.889 ms 0.895 ms 0.878 ms<br class=""><span class="Apple-tab-span" style="white-space:pre"> </span> 3 10.0.8.254 1.468 ms 1.507 ms 1.441 ms</div><div class=""><br class=""></div><div class="">I’m pretty sure it’s something simple, but I can’t seem to figure out what.</div><div class=""><br class=""></div><div class="">On the other hand, this is a distributed router (but I only have one network node</div><div class="">at the moment - the second haven’t been installed yet, it’s on the TODO list) and</div><div class="">I’ve never got a distributed router to work before (last time I tried it on Debian GNU/Linux</div><div class="">Sid/Mitaka everything stopped working).</div><div class=""><br class=""></div><div class="">So it’s possible it’s either</div><div class=""><br class=""></div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>1. That I only have one network node running - is this expected?</div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>2. Neutron isn’t configured correctly for distributed routers.</div><div class=""><br class=""></div><div class="">I’ve followed <a href="http://docs.openstack.org/mitaka/networking-guide/config-dvr-ha-snat.html" class="">http://docs.openstack.org/mitaka/networking-guide/config-dvr-ha-snat.html</a> </div><div class="">in attempt to get this working, and as far as I know, my setup is correct. But I might have</div><div class="">missed something.</div><div class=""><br class=""></div><div class="">But what?</div><div class=""><br class=""></div><div class=""><img height="419" width="649" apple-width="yes" apple-height="yes" apple-inline="yes" id="EFA58525-9B1B-4A9B-A9C6-756A143E1D01" src="cid:5EE81408-A137-4824-811E-C176825A0FA6@bayour.com" class=""></div><div class=""><img height="422" width="652" apple-width="yes" apple-height="yes" apple-inline="yes" id="A4654C59-29EC-4186-8FA0-69C179FD1322" src="cid:B05519D6-F4F5-4854-9834-1EE4F014526E@bayour.com" class=""></div><div class=""><br class=""></div></body></html>