Open Stack

By default icmp is not allowed 

Inviato da iPhone ()

> Il giorno 12/ott/2014, alle ore 09:25, Danny Choi (dannchoi) <dannchoi at cisco.com> ha scritto:
> 
> Hi,
> 
> Using devstack to deploy OpenStack, I have Controller + Network running at one physical node and Compute at a separate node.
> 
> I launched a VM at the Compute node with a private address 10.0.0.2 (Neutron router interface is 10.0.0.1).
> 
> At the Controller node, in the qrouter namespace, I could not ping the VM private address 10.0.0.2.
> 
> At the Compute node, tcpdump of the tap interface indicated ARP requests were received.
> 
> However, it did not show any ARP response.
> 
> My understanding is that the VM’s virtual interface is directly connected to this tap interface.  Since the VM is unreachable, I cannot
> launch its console to see if the ARP requests are received at the virtual interface.
> 
> Any suggestions on how to troubleshoot this? 
> 
> localadmin at qa4:~/devstack$ nova show vm1
> +--------------------------------------+----------------------------------------------------------------+
> | Property                             | Value                                                          |
> +--------------------------------------+----------------------------------------------------------------+
> | OS-DCF:diskConfig                    | MANUAL                                                         |
> | OS-EXT-AZ:availability_zone          | nova                                                           |
> | OS-EXT-STS:power_state               | 1                                                              |
> | OS-EXT-STS:task_state                | -                                                              |
> | OS-EXT-STS:vm_state                  | active                                                         |
> | OS-SRV-USG:launched_at               | 2014-10-12T14:25:15.000000                                     |
> | OS-SRV-USG:terminated_at             | -                                                              |
> | accessIPv4                           |                                                                |
> | accessIPv6                           |                                                                |
> | config_drive                         |                                                                |
> | created                              | 2014-10-12T14:23:30Z                                           |
> | flavor                               | m1.tiny (1)                                                    |
> | hostId                               | 00ac69883737ebd290ad4f38cae979a6e268902333261ba6bfbade44       |
> | id                                   | 04b5a345-cadf-4dee-9209-5bcf589b6a3c                           |
> | image                                | cirros-0.3.2-x86_64-uec (14a55982-a093-4850-80c8-7b2ae3a7eaba) |
> | key_name                             | -                                                              |
> | metadata                             | {}                                                             |
> | name                                 | vm1                                                            |
> | os-extended-volumes:volumes_attached | []                                                             |
> | private network                      | 10.0.0.2, 172.29.173.5                                         |
> | progress                             | 0                                                              |
> | security_groups                      | default                                                        |
> | status                               | ACTIVE                                                         |
> | tenant_id                            | 90058797dddc49efae4d1f45aa5ab982                               |
> | updated                              | 2014-10-12T14:23:39Z                                           |
> | user_id                              | 5ab6344540974a1fbda5b539778ebe35                               |
> +--------------------------------------+----------------------------------------------------------------+
> localadmin at qa4:~/devstack$ 
> localadmin at qa4:~/devstack$ ip netns
> qdhcp-f55f0683-830f-4523-82cb-46d638f91d47
> qrouter-62aecbdd-d58d-4b33-a743-b16ca38544c5
> localadmin at qa4:~/devstack$ 
> localadmin at qa4:~/devstack$ 
> localadmin at qa4:~/devstack$ sudo ip netns exec qrouter-62aecbdd-d58d-4b33-a743-b16ca38544c5 ping 10.0.0.2
> PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
> From 10.0.0.1 icmp_seq=1 Destination Host Unreachable
> From 10.0.0.1 icmp_seq=2 Destination Host Unreachable
> From 10.0.0.1 icmp_seq=3 Destination Host Unreachable
> From 10.0.0.1 icmp_seq=4 Destination Host Unreachable
> From 10.0.0.1 icmp_seq=5 Destination Host Unreachable
> From 10.0.0.1 icmp_seq=6 Destination Host Unreachable
> 
> 
> localadmin at qa5:~/devstack$ sudo tcpdump -i tapade47169-57
> tcpdump: WARNING: tapade47169-57: no IPv4 address assigned
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on tapade47169-57, link-type EN10MB (Ethernet), capture size 65535 bytes
> 11:58:30.042379 ARP, Request who-has 10.0.0.2 tell 10.0.0.1, length 42
> 11:58:31.041840 ARP, Request who-has 10.0.0.2 tell 10.0.0.1, length 42
> 11:58:32.041848 ARP, Request who-has 10.0.0.2 tell 10.0.0.1, length 42
> 11:58:33.044212 ARP, Request who-has 10.0.0.2 tell 10.0.0.1, length 42
> 11:58:34.041866 ARP, Request who-has 10.0.0.2 tell 10.0.0.1, length 42
> 
> 
> Thanks,
> Danny
> !DSPAM:1,543aaefc201211675819574!
> _______________________________________________
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,543aaefc201211675819574!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20141012/cb1d987a/attachment.html>