Floating IP Configuration in Quantum + openvswitch
I need some help in configuration of quantum floating ips.
I am able to ping and ssh my instances via their internal ips (172.24.1.x)
But not able to access them via floating ips .
I am using gre type network, and using all in one box, once its up i am adding some more compute node in the cluster.
find below the results.
root@us000901:~# quantum floatingip-list
+------
| id | fixed_ip_address | floating_ip_address | port_id |
+------
| 2381aa6c-
| 241482f1-
| 6ca0e952-
| f3f9e910-
+------
root@us000901:~# quantum router-list
+------
| id | name | external_
+------
| 935a00d9-
+------
root@us000901:~# quantum net-list
+------
| id | name | subnets |
+------
| 162030bb-
| 35918ece-
+------
root@us000901:~# quantum subnet-list
+------
| id | name | cidr | allocation_pools |
+------
| 9404d2c0-
| fa9dc9b5-
+------
root@us000901:~# ovs-vsctl show
e2339720-
Bridge br-int
Port br-int
Port patch-tun
Port "qvo97697210-fd"
tag: 2
Port "tap5cb36f0c-c7"
tag: 2
Bridge br-tun
Port patch-int
Port br-tun
Bridge br-ex
Port "eth3"
Port br-ex
ovs_version: "1.4.0+build0"
root@us000901:~#
root@us000901:~# cat /etc/network/
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet static
address 10.83.192.1
netmask 255.255.255.0
network 10.83.192.0
broadcast 10.83.192.255
gateway 10.83.192.254
# dns-* options are implemented by the resolvconf package, if installed
dns-nameservers 10.83.2.25
dns-search ap.tieto.com
# VMs Networks with OVS in tunnel mode
auto eth1
iface eth1 inet static
address 172.24.0.3
netmask 255.255.0.0
# Public Bridge
auto eth3
iface eth3 inet manual
up ifconfig $IFACE 0.0.0.0 up
up ip link set $IFACE promisc on
down ip link set $IFACE promisc off
down ifconfig $IFACE down
root@us000901:~#
I am also having one question can i use floating ip are of same network where i am using my node eth0.
Question information
- Language:
- English Edit question
- Status:
- Solved
- For:
- neutron Edit question
- Assignee:
- No assignee Edit question
- Solved by:
- vivekraghuwanshi
- Solved:
- 2012-11-05
- Last query:
- 2012-11-05
- Last reply:
- 2012-10-17
root@us000901:~# quantum port-list -- --device_id 86a3ec45-
+------
| id | name | mac_address | fixed_ips |
+------
| 97697210-
+------
root@us000901:~# quantum floatingip-show 2381aa6c-
+------
| Field | Value |
+------
| fixed_ip_address | 172.24.1.3 |
| floating_ip_address | 10.83.192.132 |
| floating_network_id | 162030bb-
| id | 2381aa6c-
| port_id | 97697210-
| router_id | 935a00d9-
| tenant_id | 51c3b9e0f5e74e4
+------
root@us000901:~#
adding some more infotmation
| Aaron Rosen (arosen) said : | #2 |
You're probably getting blocked by nova security groups. If you change the following values in nova.conf it should work.
firewall_
libvirt_
Thanks Aaron,
I am trying the proposed config changes and update teh thread accordingly.
Not resolved via this
firewall_
Instanves booted without IP and in erroe state
libvirt_
Results Instances Failed to spawn
| Matt Symonds (msymonds) said : | #6 |
I have the same problem with floating IP's.
I am running one control node with quantum-server, L3 and openvswitch, and two compute nodes with nova-compute and openvswitch.
I am using namespaces.
I am able to ping the private IP address from the namespace, but not the floating IP.
I can see the (correctly NAT'd) traffic getting to the compute node on the bridge interface for the VM.
My default secgroup is:
[admin:admin] root@openstack-
+-----
| IP Protocol | From Port | To Port | IP Range | Source Group |
+------
| icmp | -1 | -1 | 0.0.0.0/0 | |
+------
When loading both:
firewall_
libvirt_
I can ping the VM on its public and floating IP.
| dan wendlandt (danwent) said : | #7 |
I do not think what you're trying to do will work, as the routing table on your host will likely send packets to 10.83.192.0/24 out eth0, where as you need a route that sends traffic to 10.83.192.0/24 out the br-ex interface.
| Matt Symonds (msymonds) said : | #8 |
I now have this working.
I had created the secgroup for the admin user but was booting machines for the demo user.
Hi All,
The issue is now fixed by
vi /usr/share/
s = [('/sbin/iptables', self.ipv4)]
If I change this to:
s = [('iptables', self.ipv4)]
and then its fixed
now i am able to ping and ssh the instances
Thankyou all
Hi All,
The issue is now resolved
On Wed, Oct 24, 2012 at 4:41 PM, Matt
<email address hidden>wrote:
> Your question #211395 on quantum changed:
> https:/
>
> Matt posted a new comment:
> I now have this working.
>
> I had created the secgroup for the admin user but was booting machines
> for the demo user.
>
> --
> You received this question notification because you asked the question.
>
--
ViVek Raghuwanshi
Mobile -+91-09595950504
Skype - vivek_raghuwanshi

