<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
So the situation is:<br>
<ul>
<li>VM1 has a floating IP and can be reached via floating IP</li>
<li>VM1 can ping VM2</li>
<li>VM2 can't ssh VM2</li>
</ul>
Useful additional information you may have gathered already: <br>
<ul>
<li>Does the ssh client issue any error message, and which? <br>
</li>
<li>Is an sshd running on VM2?</li>
<li>If yes, any error in the sshd log? I.e., does VM2 receive
anything at all, and how does it process what it receives</li>
<li>Any <i>outgoing </i>connectivity problems from VM2?<br>
</li>
</ul>
<p>Other things to do or check:<br>
</p>
<ul>
<li>Use debug options when running the ssh client and sshd</li>
<li>packet tracing on both VMs</li>
<li>ssh to VM2's private IP from the DHCP server's namespace</li>
<li>When you ping VM2, are you sure it's really VM2 that responds?
Perhaps something else has the same IP, or even MAC. <br>
You can check that by tracing ICMP on VM2.<br>
</li>
</ul>
Bernd<br>
<br>
<div class="moz-cite-prefix">On 4/7/2018 2:56 AM, Brian Haley wrote:<br>
</div>
<blockquote type="cite"
cite="mid:385bc37e-870d-3440-4108-2d370a96c343@gmail.com">On
04/06/2018 01:28 PM, s serge wrote:
<br>
<blockquote type="cite">Hello,
<br>
<br>
I'm evaluating an installation and everything from networking
side was looking good
<br>
until I tried to reach a VM host via private network from
another VM via ssh.
<br>
<br>
In short:
<br>
1. Spawn a VM
<br>
2. Associate a floating IP
<br>
3. Logon to VM via ssh on public network
<br>
4. Spawn another VM
<br>
5. Try to reach 1st VM via ssh private network IP - FAIL.
<br>
6. ICMP to 1st VM IP via private network works well.
<br>
<br>
Looks pretty weird for me as according to logs everything looks
fine,
<br>
both VM got assigned a private IP and fetches metadata info.
<br>
<br>
Some notes about setup:
<br>
Separate interfaces for management, private(VXLAN) and external
network.
<br>
Dozen of similar servers.
<br>
<br>
I'll continue to debug the issue, but appreciate any relevant
feedback.
<br>
</blockquote>
<br>
I would check two things:
<br>
<br>
1. Security groups are allowing port 22
<br>
2. MTU is set correctly, should probably be 1450 if you're using
VXLAN, which should have been set via the DHCP reply
<br>
<br>
-Brian
<br>
<br>
_______________________________________________
<br>
Mailing list:
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
<br>
Post to : <a class="moz-txt-link-abbreviated" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>
<br>
Unsubscribe :
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
<br>
</blockquote>
<br>
</body>
</html>