Quantcast
Channel: Ask OpenStack: Q&A Site for OpenStack Users and Developers - Individual question feed
Viewing all articles
Browse latest Browse all 49

Comment by neel-basu-z for RDO link providing an answer https://openstack.redhat.com/Neutron_... NOTE: It is important to do the network restart before setting up the router gateway below, because a network restart takes destroys and recreates br-ex which causes the router's interface in the qrouter-* netns to be deleted, and it won't be recreated without clearing and re-setting the gateway. # . keystonerc_admin # neutron router-gateway-clear router1 # neutron subnet-delete public_subnet You need to recreate the public subnet with an allocation range outside of your external DHCP range and set the gateway to the default gateway of the external network. # neutron subnet-create --name public_subnet --enable_dhcp=False --allocation-pool=start=192.168.122.10,end=192.168.122.20 --gateway=192.168.122.1 public 192.168.122.0/24 # neutron router-gateway-set router1 public

Next: Answer by samfrid for My external IP address is 172.16.21.11 with CIDR /23 with gateway 172.16.20.1. This is my actual network configuration as in ifcfg-em1. I've installed Openstack with RDO on Fedora 20. After Installation # neutron router-list +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ | id | name | external_gateway_info | distributed | ha | +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ | 168fe615-95ea-4c72-824d-03a1b44921df | router1 | {"network_id": "d58bc7d6-3353-486e-af61-2179df64beb7", "enable_snat": true, "external_fixed_ips": [{"subnet_id": "326cb3d9-936d-49a4-bf0a-506cfd006b14", "ip_address": "172.24.4.226"}]} | False | False | +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ [root@localhost hcuser(keystone_admin)]# neutron subnet-list +--------------------------------------+----------------+-----------------+--------------------------------------------------+ | id | name | cidr | allocation_pools | +--------------------------------------+----------------+-----------------+--------------------------------------------------+ | d8601bb2-a0e5-43d7-b17c-1b9232a20ca5 | private_subnet | 10.0.0.0/24 | {"start": "10.0.0.2", "end": "10.0.0.254"} | | 326cb3d9-936d-49a4-bf0a-506cfd006b14 | public_subnet | 172.24.4.224/28 | {"start": "172.24.4.226", "end": "172.24.4.238"} | +--------------------------------------+----------------+-----------------+--------------------------------------------------+ I see in both places 172.24.4.X series is being used. From where this IP is comming ? As it says public. Is it supposed to be replaced by something on 172.16.21.11/23 ? How Can I fix it ? -- EDIT -- After changing my subnet to 172.16.20.0/23 [root@localhost ~(keystone_admin)]# neutron router-list +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ | id | name | external_gateway_info | distributed | ha | +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ | 168fe615-95ea-4c72-824d-03a1b44921df | router1 | {"network_id": "fe3a3489-9114-4fb0-9a81-b12e125d4204", "enable_snat": true, "external_fixed_ips": [{"subnet_id": "6b0599d5-5407-440d-89f8-51ca2daa6fff", "ip_address": "172.16.21.21"}]} | False | False | +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ [root@localhost ~(keystone_admin)]# neutron net-list +--------------------------------------+---------+-----------------------------------------------------+ | id | name | subnets | +--------------------------------------+---------+-----------------------------------------------------+ | 852f04cb-b478-4b08-ba25-77991a118497 | private | d8601bb2-a0e5-43d7-b17c-1b9232a20ca5 10.0.0.0/24 | | fe3a3489-9114-4fb0-9a81-b12e125d4204 | public | 6b0599d5-5407-440d-89f8-51ca2daa6fff 172.16.20.0/23 | +--------------------------------------+---------+-----------------------------------------------------+ [root@localhost ~(keystone_admin)]# neutron subnet-list +--------------------------------------+----------------+----------------+---------------------------------------------------+ | id | name | cidr | allocation_pools | +--------------------------------------+----------------+----------------+---------------------------------------------------+ | d8601bb2-a0e5-43d7-b17c-1b9232a20ca5 | private_subnet | 10.0.0.0/24 | {"start": "10.0.0.2", "end": "10.0.0.254"} | | 6b0599d5-5407-440d-89f8-51ca2daa6fff | public_subnet | 172.16.20.0/23 | {"start": "172.16.21.21", "end": "172.16.21.171"} | +--------------------------------------+----------------+----------------+---------------------------------------------------+ But I cannot ping dhcp namespace from router namespace and vice verse -- ping status from dhcp to router [hcuser@localhost ~]$ sudo ip netns exec qdhcp-852f04cb-b478-4b08-ba25-77991a118497 ping 10.0.0.1 PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. From 10.0.0.2 icmp_seq=1 Destination Host Unreachable ^C --- 10.0.0.1 ping statistics --- 6 packets transmitted, 0 received, +5 errors, 100% packet loss, time 5001ms pipe 4 [hcuser@localhost ~]$ sudo ip netns exec qdhcp-852f04cb-b478-4b08-ba25-77991a118497 ping 10.0.0.2 PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.027 ms ^C --- 10.0.0.2 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 999ms rtt min/avg/max/mdev = 0.027/0.027/0.028/0.005 ms -- ping status from router to dhcp [hcuser@localhost ~]$ sudo ip netns exec qdhcp-852f04cb-b478-4b08-ba25-77991a118497 ping 10.0.0.1 PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. From 10.0.0.2 icmp_seq=1 Destination Host Unreachable ^C --- 10.0.0.1 ping statistics --- 6 packets transmitted, 0 received, +5 errors, 100% packet loss, time 5001ms pipe 4 [hcuser@localhost ~]$ sudo ip netns exec qdhcp-852f04cb-b478-4b08-ba25-77991a118497 ping 10.0.0.2 PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0 ... (more)
Previous: Answer by Charles Benon for My external IP address is 172.16.21.11 with CIDR /23 with gateway 172.16.20.1. This is my actual network configuration as in ifcfg-em1. I've installed Openstack with RDO on Fedora 20. After Installation # neutron router-list +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ | id | name | external_gateway_info | distributed | ha | +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ | 168fe615-95ea-4c72-824d-03a1b44921df | router1 | {"network_id": "d58bc7d6-3353-486e-af61-2179df64beb7", "enable_snat": true, "external_fixed_ips": [{"subnet_id": "326cb3d9-936d-49a4-bf0a-506cfd006b14", "ip_address": "172.24.4.226"}]} | False | False | +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ [root@localhost hcuser(keystone_admin)]# neutron subnet-list +--------------------------------------+----------------+-----------------+--------------------------------------------------+ | id | name | cidr | allocation_pools | +--------------------------------------+----------------+-----------------+--------------------------------------------------+ | d8601bb2-a0e5-43d7-b17c-1b9232a20ca5 | private_subnet | 10.0.0.0/24 | {"start": "10.0.0.2", "end": "10.0.0.254"} | | 326cb3d9-936d-49a4-bf0a-506cfd006b14 | public_subnet | 172.24.4.224/28 | {"start": "172.24.4.226", "end": "172.24.4.238"} | +--------------------------------------+----------------+-----------------+--------------------------------------------------+ I see in both places 172.24.4.X series is being used. From where this IP is comming ? As it says public. Is it supposed to be replaced by something on 172.16.21.11/23 ? How Can I fix it ? -- EDIT -- After changing my subnet to 172.16.20.0/23 [root@localhost ~(keystone_admin)]# neutron router-list +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ | id | name | external_gateway_info | distributed | ha | +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ | 168fe615-95ea-4c72-824d-03a1b44921df | router1 | {"network_id": "fe3a3489-9114-4fb0-9a81-b12e125d4204", "enable_snat": true, "external_fixed_ips": [{"subnet_id": "6b0599d5-5407-440d-89f8-51ca2daa6fff", "ip_address": "172.16.21.21"}]} | False | False | +--------------------------------------+---------+------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+-------------+-------+ [root@localhost ~(keystone_admin)]# neutron net-list +--------------------------------------+---------+-----------------------------------------------------+ | id | name | subnets | +--------------------------------------+---------+-----------------------------------------------------+ | 852f04cb-b478-4b08-ba25-77991a118497 | private | d8601bb2-a0e5-43d7-b17c-1b9232a20ca5 10.0.0.0/24 | | fe3a3489-9114-4fb0-9a81-b12e125d4204 | public | 6b0599d5-5407-440d-89f8-51ca2daa6fff 172.16.20.0/23 | +--------------------------------------+---------+-----------------------------------------------------+ [root@localhost ~(keystone_admin)]# neutron subnet-list +--------------------------------------+----------------+----------------+---------------------------------------------------+ | id | name | cidr | allocation_pools | +--------------------------------------+----------------+----------------+---------------------------------------------------+ | d8601bb2-a0e5-43d7-b17c-1b9232a20ca5 | private_subnet | 10.0.0.0/24 | {"start": "10.0.0.2", "end": "10.0.0.254"} | | 6b0599d5-5407-440d-89f8-51ca2daa6fff | public_subnet | 172.16.20.0/23 | {"start": "172.16.21.21", "end": "172.16.21.171"} | +--------------------------------------+----------------+----------------+---------------------------------------------------+ But I cannot ping dhcp namespace from router namespace and vice verse -- ping status from dhcp to router [hcuser@localhost ~]$ sudo ip netns exec qdhcp-852f04cb-b478-4b08-ba25-77991a118497 ping 10.0.0.1 PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. From 10.0.0.2 icmp_seq=1 Destination Host Unreachable ^C --- 10.0.0.1 ping statistics --- 6 packets transmitted, 0 received, +5 errors, 100% packet loss, time 5001ms pipe 4 [hcuser@localhost ~]$ sudo ip netns exec qdhcp-852f04cb-b478-4b08-ba25-77991a118497 ping 10.0.0.2 PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0.027 ms ^C --- 10.0.0.2 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 999ms rtt min/avg/max/mdev = 0.027/0.027/0.028/0.005 ms -- ping status from router to dhcp [hcuser@localhost ~]$ sudo ip netns exec qdhcp-852f04cb-b478-4b08-ba25-77991a118497 ping 10.0.0.1 PING 10.0.0.1 (10.0.0.1) 56(84) bytes of data. From 10.0.0.2 icmp_seq=1 Destination Host Unreachable ^C --- 10.0.0.1 ping statistics --- 6 packets transmitted, 0 received, +5 errors, 100% packet loss, time 5001ms pipe 4 [hcuser@localhost ~]$ sudo ip netns exec qdhcp-852f04cb-b478-4b08-ba25-77991a118497 ping 10.0.0.2 PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data. 64 bytes from 10.0.0.2: icmp_seq=1 ttl=64 time=0 ... (more)
$
0
0
I've recreated network, router and subnets. Please check the additional outputs on https://gist.github.com/anonymous/67d1f967711d90a023bb . Now I see some ARP traffic on tcpdump. But still I cant ping the network on qdhcp namsespace from qrouter namespace and vice verse

Viewing all articles
Browse latest Browse all 49

Trending Articles