Open Stack

Thanks Andreas. My security groups do allow icmp traffic.
+---------+----------------------------------------------------------------
------+
| name    | security_group_rules
      |
+---------+----------------------------------------------------------------
------+
| default | egress, IPv4
      |
|         | egress, IPv6
      |
|         | ingress, IPv4, 22/tcp, remote_ip_prefix: 0.0.0.0/0
      |
|         | ingress, IPv4, icmp, remote_ip_prefix: 0.0.0.0/0
      |
|         | ingress, IPv4, remote_group_id:
d404679b-aeed-4d2f-bea9-2c7d19ff3fb1 |
|         | ingress, IPv6, remote_group_id:
d404679b-aeed-4d2f-bea9-2c7d19ff3fb1 |
+---------+‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹‹+

I can¹t access my VM¹s console, so I do not know whether I can ping from
my VM. I figured this might be a related issue. I receive this error on
when trying to access the noVNC console:
Failed to connect to server (code: 1006)


This is a two node setup. I have one controller/neutron-network node.
Here¹s the output of 'ovs-vsctl show¹:

Bridge br-tun
  fail_mode: secure
    Port "gre-ac10183d"
      Interface "gre-ac10183d"
        type: gre
        options: {df_default="true", in_key=flow, local_ip="172.16.24.60",
out_key=flow, remote_ip="172.16.24.61"}
    Port gre-mirror
      Interface gre-mirror
    Port br-tun
      Interface br-tun
        type: internal
    Port patch-int
      Interface patch-int
        type: patch
        options: {peer=patch-tun}
    Bridge br-ex
    Port "enp4s0f0"
      Interface "enp4s0f0"
    Port phy-br-ex
      Interface phy-br-ex
        type: patch
        options: {peer=int-br-ex}
    Port br-ex
      Interface br-ex
        type: internal
    Port "enp4s0f1"
      Interface "enp4s0f1"
    Bridge br-int
  fail_mode: secure
    Port "qr-a81f0614-0e"
      tag: 2
      Interface "qr-a81f0614-0e"
        type: internal
    Port "qg-289ea4d2-29"
      tag: 5
      Interface "qg-289ea4d2-29"
        type: internal
    Port br-int
      Interface br-int
        type: internal
    Port patch-tun
      Interface patch-tun
        type: patch
        options: {peer=patch-int}
    Port int-br-ex
      Interface int-br-ex
        type: patch
        options: {peer=phy-br-ex}
    Port "tap468d3ee4-c0"
      tag: 4095
      Interface "tap468d3ee4-c0"
        type: internal
    ovs_version: "2.3.1"


I have on compute node. Here¹s the output of 'ovs-vsctl show':

Bridge br-int
  fail_mode: secure
    Port "qvoc6d01e4b-1d"
      tag: 1
      Interface "qvoc6d01e4b-1d"
    Port br-int
      Interface br-int
        type: internal
    Port patch-tun
      Interface patch-tun
        type: patch
        options: {peer=patch-int}
Bridge br-tun
  fail_mode: secure
    Port br-tun
      Interface br-tun
        type: internal
    Port patch-int
      Interface patch-int
        type: patch
        options: {peer=patch-tun}
    Port "gre-ac10183c"
      Interface "gre-ac10183c"
        type: gre
        options: {df_default="true", in_key=flow, local_ip="172.16.24.61",
out_key=flow, remote_ip="172.16.24.60"}
    Port gre-mirror
      Interface gre-mirror
    Port "tap0"
      Interface "tap0"
    ovs_version: "2.3.1"


I also have a laptop on the same network as the openstack machines. I can
successfully ping the interface of the neutron router from my laptop.

As far as the physical interfaces, I am only using one physical interface
on each openstack machine. I know this is not the recommended setup, but
since this is only a POC, I wanted to keep it simple.

-Tyler



On 11/17/15, 12:48 AM, "Andreas Scheuring" <scheuran at linux.vnet.ibm.com>
wrote:

>ease check your Security Groups first.