In tenant network interconnection

Asked by Coulin Jean-Luc

Hello,

I try to configure Folsom/Quantum/Ovs/GRE on Ubuntu 12.04 on a multi-node base.
One controller host (Horizon, keystone, glance, cinder, quantum server, network controller), two compute nodes.

I created 2 networks each associated to a subnet (10.10.10.0/24 and 10.10.20.0/24).
I created through the horizon dashboard 2 Vms attached one on the first network, and the other on the second.
Each of my VMs get an ip with the dhcp protocol (10.10.10.3 and 10.10.20.3).

I created a routeer for tenant project_one through the quantum cli.
I attached the router to both networks.

I added route to the other network in each VM.
              ip route add 10.10.20.0/24 via 10.10.10.1 on the first VM
              ip route add 10.10.10.0/24 via 10.10.20.1 on the second VM

Now from VMs if I ping router network IP in subnet, it works.
          on 10.10.10.3 :
                      ping 10.10.20.1 works
                      ping 10.10.20.3 doesn't

          on 10.10.20.3 :
                      ping 10.10.10.1 works
                      ping 10.10.10.3 doesn't

I am ready to send any configuration information.

Any clue to get this working would be appreciated.

Thanks,

JL

Question information

Language:
English Edit question
Status:
Solved
For:
neutron Edit question
Assignee:
No assignee Edit question
Solved by:
dan wendlandt
Solved:
Last query:
Last reply:
Revision history for this message
Best dan wendlandt (danwent) said :
#1

My guess would be that you are also using security groups, which drop pings by default. If you allow ICMP for the security groups that both of the VMs are in, I think you will be able to ping the VMs as well. Router interfaces don't have security groups, and hence the pings work right away.

Revision history for this message
Coulin Jean-Luc (jean-luc-coulin) said :
#2

Tanks a lot Dan,

I added rules for ICMP traffic to default security group, then restarted the nova-compute service on both node to be able to ping.

BR, Jean-Luc

Revision history for this message
Coulin Jean-Luc (jean-luc-coulin) said :
#3

Thanks dan wendlandt, that solved my question.