The instance would still require a floating IP. That is the only way the host would get outside of the tenant network. We do this for some of our tenants to ensure that we know that only connections outbound would be controlled by Floating IPs. On Jan 15, 2016, at 6:55 PM, Akshay Kumar Sanghai <akshaykumarsanghai at gmail.com<mailto:akshaykumarsanghai at gmail.com>> wrote: Hi, In the cli of neutron router-gateway-set, thers is an option of disable snat. http://docs.openstack.org/cli-reference/neutron.html#neutron-router-gateway-set Does that mean i can create a tenant network and the packet will go out with the same fixed ip of the vm? Assume the tenant network created is routable or identifiable in the physical network. I tried to disable snat for the router gateway, but the packet wasn't going out from the external interface. Do i need to edit some iptable rules or the disable snat option doesn't work? Thanks, Akshay _______________________________________________ OpenStack-operators mailing list OpenStack-operators at lists.openstack.org<mailto:OpenStack-operators at lists.openstack.org> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20160116/38f8ac75/attachment.html>