<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Thanks a lot Jorge for your response, these are the outputs:</p>
<p>ip netns exec qrouter-570a7359-1658-4ff4-8f0c-947e487ffc76
ifconfig<br>
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536<br>
inet 127.0.0.1 netmask 255.0.0.0<br>
inet6 ::1 prefixlen 128 scopeid 0x10<host><br>
loop txqueuelen 1 (Local Loopback)<br>
RX packets 0 bytes 0 (0.0 B)<br>
RX errors 0 dropped 0 overruns 0 frame 0<br>
TX packets 0 bytes 0 (0.0 B)<br>
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0<br>
<br>
qg-1fd409f8-91: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>
mtu 1450<br>
inet XXXXXX.8 netmask 255.255.255.0 broadcast XXXXXX<br>
inet6 fe80::f816:3eff:fef7:a0db prefixlen 64 scopeid
0x20<link><br>
ether fa:16:3e:f7:a0:db txqueuelen 1000 (Ethernet)<br>
RX packets 0 bytes 0 (0.0 B)<br>
RX errors 0 dropped 0 overruns 0 frame 0<br>
TX packets 37 bytes 2082 (2.0 KiB)<br>
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0<br>
<br>
qr-5ac8cae0-61: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>
mtu 1450<br>
inet 10.10.0.1 netmask 255.255.255.0 broadcast
10.10.0.255<br>
inet6 fe80::f816:3eff:fe3b:b19b prefixlen 64 scopeid
0x20<link><br>
ether fa:16:3e:3b:b1:9b txqueuelen 1000 (Ethernet)<br>
RX packets 338 bytes 31394 (30.6 KiB)<br>
RX errors 0 dropped 0 overruns 0 frame 0<br>
TX packets 360 bytes 38637 (37.7 KiB)<br>
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0<br>
</p>
<p>The main strange part is here: qg-1fd409f8-91:
flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1450<br>
inet XXXXXX.8 netmask 255.255.255.0 broadcast XXXXXX</p>
<p>xxxx.8 strange IP it is not my network node IP.</p>
<p><br>
</p>
<p>And here are more outputs:</p>
<p>ip netns exec qrouter-570a7359-1658-4ff4-8f0c-947e487ffc76
iptables -L -n -v<br>
Chain INPUT (policy ACCEPT 116 packets, 15374 bytes)<br>
pkts bytes target prot opt in out
source destination <br>
308 29294 neutron-l3-agent-INPUT all -- * *
0.0.0.0/0 0.0.0.0/0 <br>
<br>
Chain FORWARD (policy ACCEPT 6 packets, 504 bytes)<br>
pkts bytes target prot opt in out
source destination <br>
6 504 neutron-filter-top all -- * *
0.0.0.0/0 0.0.0.0/0 <br>
6 504 neutron-l3-agent-FORWARD all -- * *
0.0.0.0/0 0.0.0.0/0 <br>
<br>
Chain OUTPUT (policy ACCEPT 342 packets, 32649 bytes)<br>
pkts bytes target prot opt in out
source destination <br>
342 32649 neutron-filter-top all -- * *
0.0.0.0/0 0.0.0.0/0 <br>
342 32649 neutron-l3-agent-OUTPUT all -- * *
0.0.0.0/0 0.0.0.0/0 <br>
<br>
Chain neutron-filter-top (2 references)<br>
pkts bytes target prot opt in out
source destination <br>
348 33153 neutron-l3-agent-local all -- * *
0.0.0.0/0 0.0.0.0/0 <br>
<br>
Chain neutron-l3-agent-FORWARD (1 references)<br>
pkts bytes target prot opt in out
source destination <br>
6 504 neutron-l3-agent-scope all -- * *
0.0.0.0/0 0.0.0.0/0 <br>
<br>
Chain neutron-l3-agent-INPUT (1 references)<br>
pkts bytes target prot opt in out
source destination <br>
192 13920 ACCEPT all -- * *
0.0.0.0/0 0.0.0.0/0 mark match 0x1/0xffff<br>
0 0 DROP tcp -- * *
0.0.0.0/0 0.0.0.0/0 tcp dpt:9697<br>
<br>
Chain neutron-l3-agent-OUTPUT (1 references)<br>
pkts bytes target prot opt in out
source destination <br>
<br>
Chain neutron-l3-agent-local (1 references)<br>
pkts bytes target prot opt in out
source destination <br>
<br>
Chain neutron-l3-agent-scope (1 references)<br>
pkts bytes target prot opt in out
source destination <br>
0 0 DROP all -- * qr-5ac8cae0-61
0.0.0.0/0 0.0.0.0/0 mark match !
0x4000000/0xffff0000<br>
<br>
</p>
<br>
<div class="moz-cite-prefix">On 03/28/2018 11:03 PM, Jorge Luiz
Correa wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAE2bT_1=P1PoEVAr_Uj6_=yU8aDPbDj78bF3RKpehzm4naiETA@mail.gmail.com">
<div dir="ltr">
<div>
<div>
<div>You can use <br>
<br>
ip netns exec qroute-ID ifconfig <br>
ip netns exec qroute-ID tcpdump -eni <some qr or qg
interface><br>
<br>
</div>
to verify if packages are arriving. And, you can also use<br>
<br>
ip netns exec qroute-ID iptables -L -n -v<br>
<br>
</div>
to see where packages are being dropped (there will be
counters on DROP rules). <br>
<br>
</div>
Regards.<br>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">- JLC</div>
</div>
</div>
<br>
<div class="gmail_quote">On Wed, Mar 28, 2018 at 3:38 PM, wahi <span
dir="ltr"><<a href="mailto:wahi@sci.am" target="_blank"
moz-do-not-send="true">wahi@sci.am</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Dear all,<br>
<br>
I installed Openstack ocata using the packstack on Centos 7,
so there is a controller node, network node and four compute
nodes.<br>
<br>
I created the private and public network. The instance is
running and getting the internal IP then I am associating
the external IP without any problem.<br>
<br>
From the network node I can use:<br>
ip netns exec qroute-ID ping external-IP or SSH<br>
<br>
But no ping or ssh using the ping or ssh command from the
network or controller node or even the compute node where
the instance is running.<br>
<br>
No selinux or firewall on all nodes.<br>
<br>
SSH enabled between controller and all remaining nodes.<br>
<br>
Security rules for SSH and ping has been added.<br>
<br>
Really appreciate any help or suggestion to identify the
problem.<br>
<br>
<br>
Many thanks in advance.<br>
<br>
<br>
<br>
Regards,<br>
Wahi<br>
<br>
<br>
<br>
______________________________<wbr>_________________<br>
Mailing list: <a
href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
rel="noreferrer" target="_blank" moz-do-not-send="true">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k</a><br>
Post to : <a
href="mailto:openstack@lists.openstack.org"
target="_blank" moz-do-not-send="true">openstack@lists.openstack.org</a><br>
Unsubscribe : <a
href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
rel="noreferrer" target="_blank" moz-do-not-send="true">http://lists.openstack.org/cgi<wbr>-bin/mailman/listinfo/openstac<wbr>k</a><br>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Wahi Narsisian
Vice-Head of Center for Scientific Computing,
Institute for Informatics and Automation Problems,
National Academy of Sciences of the Republic of Armenia
1, P. Sevak str., Yerevan 0014, Armenia
t: 374 91 557285
e: <a class="moz-txt-link-abbreviated" href="mailto:wahi@sci.am">wahi@sci.am</a></pre>
</body>
</html>