[Openstack] [neutron] Network node can't see external network

David Pintor hiya at davidpint.org
Wed Aug 27 10:36:52 UTC 2014


Hi,

After sorting this out, I found out that my VMs weren't able to get an 
IP via DHCP.

After a lot of troubleshooting, I fixed it by enabling IP forwarding 
(net.ipv4.ip_forward=1) in the compute node (which is actually not 
mentioned in the documentation: 
http://docs.openstack.org/icehouse/install-guide/install/yum/content/neutron-ml2-compute-node.html)

I'm not quite sure whether this has been omitted by mistake or whether 
my configuration could be wrong somewhere else.

Any thoughts? Anyone out there with a similar 3-node configuration?

Thanks,

David


On 22/08/2014 16:51, Remo Mattei wrote:
> Your br-ex does not have an ip your eth2 should not have the ip which
> is correct.
>
> Try that.
>
> Remo
>
> Inviato da IPad ()
>
>> Il giorno Aug 22, 2014, alle ore 5:05, David Pintor 
>> <hiya at davidpint.org> ha scritto:
>>
>> Hi,
>>
>> I have followed the Icehouse doc to install a 3 node environment in 
>> CentOS: 
>> http://docs.openstack.org/icehouse/install-guide/install/yum/content/basics-neutron-networking-network-node.html
>>
>> In my network node, my external NIC is configured witout IP as per 
>> the documentation.
>>
>> [root at network ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth2
>> DEVICE=eth2
>> UUID=4a1e4bc2-dac3-4c0a-985a-5a4a2203196e
>> BOOTPROTO=none
>> ONBOOT=yes
>> TYPE=Ethernet
>> HWADDR=00:0c:29:8d:cc:0a
>>
>>
>> However I cannot ping the external network (.80 is the virtual 
>> router).
>>
>> [root at network ~]# ping 192.168.50.80
>> PING 192.168.50.80 (192.168.50.80) 56(84) bytes of data.
>> From 10.0.0.21 icmp_seq=1 Destination Host Unreachable
>> From 10.0.0.21 icmp_seq=2 Destination Host Unreachable
>> From 10.0.0.21 icmp_seq=3 Destination Host Unreachable
>>
>>
>> This is the info of my environment:
>>
>>
>> [root at network ~]# ip a
>> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
>>    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>>    inet 127.0.0.1/8 scope host lo
>>    inet6 ::1/128 scope host
>>       valid_lft forever preferred_lft forever
>> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
>> state UP qlen 1000
>>    link/ether 00:0c:29:8d:cc:f6 brd ff:ff:ff:ff:ff:ff
>>    inet 10.0.0.21/24 brd 10.0.0.255 scope global eth0
>>    inet6 fe80::20c:29ff:fe8d:ccf6/64 scope link
>>       valid_lft forever preferred_lft forever
>> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
>> state UP qlen 1000
>>    link/ether 00:0c:29:8d:cc:00 brd ff:ff:ff:ff:ff:ff
>>    inet 10.0.1.21/24 brd 10.0.1.255 scope global eth1
>>    inet6 fe80::20c:29ff:fe8d:cc00/64 scope link
>>       valid_lft forever preferred_lft forever
>> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
>> state UP qlen 1000
>>    link/ether 00:0c:29:8d:cc:0a brd ff:ff:ff:ff:ff:ff
>>    inet6 fe80::20c:29ff:fe8d:cc0a/64 scope link
>>       valid_lft forever preferred_lft forever
>> 5: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN
>>    link/ether 9e:d9:ee:cf:18:ff brd ff:ff:ff:ff:ff:ff
>> 6: br-ex: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state 
>> UNKNOWN
>>    link/ether 00:0c:29:8d:cc:0a brd ff:ff:ff:ff:ff:ff
>>    inet6 fe80::80c0:34ff:fea7:ab5e/64 scope link
>>       valid_lft forever preferred_lft forever
>> 10: qr-d0661ff1-a9: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue 
>> state UNKNOWN
>>    link/ether 2a:6d:c7:81:de:8e brd ff:ff:ff:ff:ff:ff
>>    inet6 fe80::286d:c7ff:fe81:de8e/64 scope link
>>       valid_lft forever preferred_lft forever
>> 11: br-int: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state 
>> UNKNOWN
>>    link/ether 6a:aa:36:da:13:45 brd ff:ff:ff:ff:ff:ff
>>    inet6 fe80::c058:39ff:fe4c:20f6/64 scope link
>>       valid_lft forever preferred_lft forever
>> 13: br-tun: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state 
>> UNKNOWN
>>    link/ether 56:74:ff:da:74:43 brd ff:ff:ff:ff:ff:ff
>>    inet6 fe80::9802:72ff:fed0:f05a/64 scope link
>>       valid_lft forever preferred_lft forever
>>
>> [root at network ~]# neutron net-list
>> 
>> +--------------------------------------+----------+-------------------------------------------------------+
>> | id                                   | name     | subnets          
>>                                    |
>> 
>> +--------------------------------------+----------+-------------------------------------------------------+
>> | 2abc487a-09ad-4c5c-bb6b-a98a5a255ad4 | ext-net  | 
>> bca9b325-617f-4a0c-878d-44f384056c1c 192.168.50.0/24  |
>> | 89954a51-5296-4743-97ac-19ddeb7010f4 | demo-net | 
>> 9760500a-1183-4e12-a975-ff6cbdafd27b 192.168.100.0/24 |
>> 
>> +--------------------------------------+----------+-------------------------------------------------------+
>>
>> [root at network ~]# neutron subnet-list
>> 
>> +--------------------------------------+-------------+------------------+------------------------------------------------------+
>> | id                                   | name        | cidr          
>>   | allocation_pools                                     |
>> 
>> +--------------------------------------+-------------+------------------+------------------------------------------------------+
>> | 9760500a-1183-4e12-a975-ff6cbdafd27b | demo-subnet | 
>> 192.168.100.0/24 | {"start": "192.168.100.2", "end": 
>> "192.168.100.254"} |
>> | bca9b325-617f-4a0c-878d-44f384056c1c | ext-subnet  | 
>> 192.168.50.0/24  | {"start": "192.168.50.80", "end": "192.168.50.89"}  
>> |
>> 
>> +--------------------------------------+-------------+------------------+------------------------------------------------------+
>>
>> [root at network ~]# neutron router-list
>> 
>> +--------------------------------------+-------------+-----------------------------------------------------------------------------+
>> | id                                   | name        | 
>> external_gateway_info                                                  
>>    |
>> 
>> +--------------------------------------+-------------+-----------------------------------------------------------------------------+
>> | 0786427e-d4c0-403a-a2cd-0182bc3bee1c | demo-router | 
>> {"network_id": "2abc487a-09ad-4c5c-bb6b-a98a5a255ad4", "enable_snat": 
>> true} |
>> 
>> +--------------------------------------+-------------+-----------------------------------------------------------------------------+
>>
>> [root at network ~]# ovs-vsctl show
>> 537302fd-99cc-45ff-b470-2c924daf806e
>>    Bridge br-ex
>>        Port "eth2"
>>            Interface "eth2"
>>        Port "qg-783ec99d-ba"
>>            Interface "qg-783ec99d-ba"
>>                type: internal
>>        Port br-ex
>>            Interface br-ex
>>                type: internal
>>    Bridge br-int
>>        Port "tap7ba88075-80"
>>            tag: 1
>>            Interface "tap7ba88075-80"
>>                type: internal
>>        Port "qr-b13b57db-17"
>>            tag: 1
>>            Interface "qr-b13b57db-17"
>>                type: internal
>>        Port patch-tun
>>            Interface patch-tun
>>                type: patch
>>                options: {peer=patch-int}
>>        Port "qr-d0661ff1-a9"
>>            tag: 4095
>>            Interface "qr-d0661ff1-a9"
>>                type: internal
>>        Port br-int
>>            Interface br-int
>>                type: internal
>>    Bridge br-tun
>>        Port br-tun
>>            Interface br-tun
>>                type: internal
>>        Port "gre-0a00011f"
>>            Interface "gre-0a00011f"
>>                type: gre
>>                options: {in_key=flow, local_ip="10.0.1.21", 
>> out_key=flow, remote_ip="10.0.1.31"}
>>        Port patch-int
>>            Interface patch-int
>>                type: patch
>>                options: {peer=patch-tun}
>>    ovs_version: "1.11.0"
>>
>>
>> Any hints would be much appreciated!
>>
>> Cheers,
>>
>> David
>>
>> _______________________________________________
>> Mailing list: 
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to     : openstack at lists.openstack.org
>> Unsubscribe : 
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>> !DSPAM:1,53f732d0197288080568482!
>>





More information about the Openstack mailing list