[Starlingx-discuss] 【StarlingX】Regarding external networking issue
Hi StarlingX team we have deploy virtual All-in-one simplex machine and have a question to ask for help. 1. problem: we met a problem with how to connect the external networking in cirros or centos instance. 2. current status controller-0 IP: 10.10.10.3 cirros-vm1 IP: 172.16.100.188, from 172.16.100.188(cirros-vm1) ping external subnet ext_net:10.10.10.190 OK, from 172.16.100.188(cirros-vm1) ping 10.10.10.3 (controller-0) is not OK. from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is not OK. from 10.10.10.3 (controller-0) ping 8.8.8.8 is OK. 3. configuration (1) ml2_conf.ini in container: neutron-ovs-agent-controller-0-937646f6-dtqcn: /etc/neutron/plugins/ml2/ml2_conf.ini -----------[file:ml2_conf.ini]--[begin]---------- [agent] extensions = [ml2] extension_drivers = port_security mechanism_drivers = openvswitch,sriovnicswitch,l2population path_mtu = 0 physical_network_mtus = physnet0:1500,physnet1:1500 tenant_network_types = vlan,vxlan type_drivers = flat,vlan,vxlan [ml2_type_flat] flat_networks = [ml2_type_vxlan] vni_ranges = vxlan_group = [ovs_driver] vhost_user_enabled = true [securitygroup] firewall_driver = openvswitch -----------[file:ml2_conf.ini]--[end]---------- (2) the networking topology refer below pic or the attached file. 4.infer: we need to create a bridge to connect with the external subnet with the external networking. 5.requirement: We want to ask how to configure to connect external networking in cirros-vm1 or centos instance? we expect result as below: from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is OK. Best Regards Wish you happy everyday! -------------------------------- Yong.Fu- Neusoft --------------------------------------------------------------------------------------------------- Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and may be confidential and/or privileged of Neusoft Corporation, its subsidiaries and/or its affiliates. If any reader of this communication is not the intended recipient, unauthorized use, forwarding, printing, storing, disclosure or copying is strictly prohibited, and may be unlawful.If you have received this communication in error,please immediately notify the sender by return e-mail, and delete the original message and all copies from your system. Thank you. ---------------------------------------------------------------------------------------------------
Hi, Fuyong I wish you would allow me to write you even I am not from the StarlingX team :-) From your description of your environment, I guess, . cirros-vm1 (IP: 172.16.100.188) is build over management network (10.10.10.0/24) The cirros-vm1 should have its own router (the gateway should be 172.16.100.1), and this Gateway (172.16.100.1) should be routed through an external network. Then where is your external network? You should check your openstack routers, you may find it from "ip netns list", the router should be implemented using a network namespace, just check them. Hope it help Best Regard ------------------------------------------------------------------ 发件人:付勇 <fuyong@neusoft.com> 发送时间:2019年10月25日(星期五) 17:58 收件人:starlingx-discuss <starlingx-discuss@lists.starlingx.io> 抄 送:zhaos <zhaos@neusoft.com>; lilong-neu <lilong-neu@neusoft.com>; cindy.xie <cindy.xie@intel.com>; shuicheng.lin <shuicheng.lin@intel.com>; austin.sun <austin.sun@intel.com>; 张志国 <zhangzhg@neusoft.com> 主 题:[Starlingx-discuss] 【StarlingX】Regarding external networking issue Hi StarlingX team we have deploy virtual All-in-one simplex machine and have a question to ask for help. 1. problem: we met a problem with how to connect the external networking in cirros or centos instance. 2. current status controller-0 IP: 10.10.10.3 cirros-vm1 IP: 172.16.100.188, from 172.16.100.188(cirros-vm1) ping external subnet ext_net:10.10.10.190 OK, from 172.16.100.188(cirros-vm1) ping 10.10.10.3 (controller-0) is not OK. from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is not OK. from 10.10.10.3 (controller-0) ping 8.8.8.8 is OK. 3. configuration (1) ml2_conf.ini in container: neutron-ovs-agent-controller-0-937646f6-dtqcn: /etc/neutron/plugins/ml2/ml2_conf.ini -----------[file:ml2_conf.ini]--[begin]---------- [agent] extensions = [ml2] extension_drivers = port_security mechanism_drivers = openvswitch,sriovnicswitch,l2population path_mtu = 0 physical_network_mtus = physnet0:1500,physnet1:1500 tenant_network_types = vlan,vxlan type_drivers = flat,vlan,vxlan [ml2_type_flat] flat_networks = [ml2_type_vxlan] vni_ranges = vxlan_group = [ovs_driver] vhost_user_enabled = true [securitygroup] firewall_driver = openvswitch -----------[file:ml2_conf.ini]--[end]---------- (2) the networking topology refer below pic or the attached file. 4.infer: we need to create a bridge to connect with the external subnet with the external networking. 5.requirement: We want to ask how to configure to connect external networking in cirros-vm1 or centos instance? we expect result as below: from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is OK. Best Regards Wish you happy everyday! -------------------------------- Yong.Fu- Neusoft --------------------------------------------------------------------------------------------------- Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and may be confidential and/or privileged of Neusoft Corporation, its subsidiaries and/or its affiliates. If any reader of this communication is not the intended recipient, unauthorized use, forwarding, printing, storing, disclosure or copying is strictly prohibited, and may be unlawful.If you have received this communication in error,please immediately notify the sender by return e-mail, and delete the original message and all copies from your system. Thank you. ---------------------------------------------------------------------------------------------------
Thanks Qian Jiang, @付勇<mailto:fuyong@neusoft.com>, not sure if this addressed your question or not, please let us know if any additional help needed. Thx. - cindy From: 钱江 <qianjiang@baicells.com> Sent: Monday, October 28, 2019 7:14 PM To: 付勇 <fuyong@neusoft.com>; starlingx-discuss <starlingx-discuss@lists.starlingx.io> Cc: zhaos <zhaos@neusoft.com>; lilong-neu <lilong-neu@neusoft.com>; Xie, Cindy <cindy.xie@intel.com>; Lin, Shuicheng <shuicheng.lin@intel.com>; Sun, Austin <austin.sun@intel.com>; 张志国 <zhangzhg@neusoft.com> Subject: 回复:[Starlingx-discuss] 【StarlingX】Regarding external networking issue Hi, Fuyong I wish you would allow me to write you even I am not from the StarlingX team :-) From your description of your environment, I guess, . cirros-vm1 (IP: 172.16.100.188) is build over management network (10.10.10.0/24) The cirros-vm1 should have its own router (the gateway should be 172.16.100.1), and this Gateway (172.16.100.1) should be routed through an external network. Then where is your external network? You should check your openstack routers, you may find it from "ip netns list", the router should be implemented using a network namespace, just check them. Hope it help Best Regard ------------------------------------------------------------------ 发件人:付勇 <fuyong@neusoft.com<mailto:fuyong@neusoft.com>> 发送时间:2019年10月25日(星期五) 17:58 收件人:starlingx-discuss <starlingx-discuss@lists.starlingx.io<mailto:starlingx-discuss@lists.starlingx.io>> 抄 送:zhaos <zhaos@neusoft.com<mailto:zhaos@neusoft.com>>; lilong-neu <lilong-neu@neusoft.com<mailto:lilong-neu@neusoft.com>>; cindy.xie <cindy.xie@intel.com<mailto:cindy.xie@intel.com>>; shuicheng.lin <shuicheng.lin@intel.com<mailto:shuicheng.lin@intel.com>>; austin.sun <austin.sun@intel.com<mailto:austin.sun@intel.com>>; 张志国 <zhangzhg@neusoft.com<mailto:zhangzhg@neusoft.com>> 主 题:[Starlingx-discuss] 【StarlingX】Regarding external networking issue Hi StarlingX team we have deploy virtual All-in-one simplex machine and have a question to ask for help. 1. problem: we met a problem with how to connect the external networking in cirros or centos instance. 2. current status controller-0 IP: 10.10.10.3 cirros-vm1 IP: 172.16.100.188, from 172.16.100.188(cirros-vm1) ping external subnet ext_net:10.10.10.190 OK, from 172.16.100.188(cirros-vm1) ping 10.10.10.3 (controller-0) is not OK. from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is not OK. from 10.10.10.3 (controller-0) ping 8.8.8.8 is OK. 3. configuration (1) ml2_conf.ini in container: neutron-ovs-agent-controller-0-937646f6-dtqcn: /etc/neutron/plugins/ml2/ml2_conf.ini -----------[file:ml2_conf.ini]--[begin]---------- [agent] extensions = [ml2] extension_drivers = port_security mechanism_drivers = openvswitch,sriovnicswitch,l2population path_mtu = 0 physical_network_mtus = physnet0:1500,physnet1:1500 tenant_network_types = vlan,vxlan type_drivers = flat,vlan,vxlan [ml2_type_flat] flat_networks = [ml2_type_vxlan] vni_ranges = vxlan_group = [ovs_driver] vhost_user_enabled = true [securitygroup] firewall_driver = openvswitch -----------[file:ml2_conf.ini]--[end]---------- (2) the networking topology refer below pic or the attached file. [cid:image003.jpg@01D58E9F.6D3287B0] 4.infer: we need to create a bridge to connect with the external subnet with the external networking. 5.requirement: We want to ask how to configure to connect external networking in cirros-vm1 or centos instance? we expect result as below: from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is OK. Best Regards Wish you happy everyday! -------------------------------- Yong.Fu- Neusoft --------------------------------------------------------------------------------------------------- Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and may be confidential and/or privileged of Neusoft Corporation, its subsidiaries and/or its affiliates. If any reader of this communication is not the intended recipient, unauthorized use, forwarding, printing, storing, disclosure or copying is strictly prohibited, and may be unlawful.If you have received this communication in error,please immediately notify the sender by return e-mail, and delete the original message and all copies from your system. Thank you. ---------------------------------------------------------------------------------------------------
Hi Qianjiang We have create the external subnet and Router. the external subnet is ext_net. the Router is configured as below the networking topology is as below the CMD "ip netns list" is as below the external networking is 192.168.3.0/24, gateway is 192.168.3.3. it is our real networking for access internet. from 172.16.100.188(cirros-vm1) ping external subnet ext_net:192.168.3.137 OK, from 172.16.100.188(cirros-vm1) ping 172.16.101.201 ((cirros-vm3)) is OK. from 172.16.100.188(cirros-vm1) ping 10.10.10.3 (controller-0) is not OK. from 172.16.100.188(cirros-vm1) ping 192.168.3.106 is not OK. from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is not OK. from 10.10.10.3 (controller-0) ping 8.8.8.8 is OK. from 10.10.10.3 (controller-0) ping 192.168.3.106 is OK. But we can't connect external networking yet from cirros instance, we will refer to />>>>> / /There are some check point :/ //// /Which NIC ext-net is connected ? / // /Which bridge this NIC is connected to on host ? / // /Does this bridge config ip address (should be 192.168.3.1)?/ // /And have you config any security group to enable icmp ? / // Thanks. BR Austin Sun. />>>>/ we will share our progress if any result. Thanks&Best Regards Long On 2019/10/29 下午9:26, Xie, Cindy wrote:
Thanks Qian Jiang,
@付勇 <mailto:fuyong@neusoft.com>, not sure if this addressed your question or not, please let us know if any additional help needed.
Thx. - cindy
*From:*钱江<qianjiang@baicells.com> *Sent:* Monday, October 28, 2019 7:14 PM *To:* 付勇<fuyong@neusoft.com>; starlingx-discuss <starlingx-discuss@lists.starlingx.io> *Cc:* zhaos <zhaos@neusoft.com>; lilong-neu <lilong-neu@neusoft.com>; Xie, Cindy <cindy.xie@intel.com>; Lin, Shuicheng <shuicheng.lin@intel.com>; Sun, Austin <austin.sun@intel.com>; 张志国<zhangzhg@neusoft.com> *Subject:* 回复:[Starlingx-discuss] 【StarlingX】Regarding external networking issue
Hi, Fuyong
I wish you would allow me to write you even I am not from the StarlingX team :-)
From your description of your environment, I guess,
. cirros-vm1 (IP: 172.16.100.188) is build over management network (10.10.10.0/24)
The cirros-vm1 should have its own router (the gateway should be 172.16.100.1), and this Gateway (172.16.100.1) should be routed through an external network.
Then where is your external network?
You should check your openstack routers, you may find it from "ip netns list", the router should be implemented using a network namespace, just check them.
Hope it help
Best Regard
------------------------------------------------------------------
发件人:付勇<fuyong@neusoft.com <mailto:fuyong@neusoft.com>>
发送时间:2019年10月25日(星期五) 17:58
收件人:starlingx-discuss <starlingx-discuss@lists.starlingx.io <mailto:starlingx-discuss@lists.starlingx.io>>
抄 送:zhaos <zhaos@neusoft.com <mailto:zhaos@neusoft.com>>; lilong-neu <lilong-neu@neusoft.com <mailto:lilong-neu@neusoft.com>>; cindy.xie <cindy.xie@intel.com <mailto:cindy.xie@intel.com>>; shuicheng.lin <shuicheng.lin@intel.com <mailto:shuicheng.lin@intel.com>>; austin.sun <austin.sun@intel.com <mailto:austin.sun@intel.com>>; 张志国<zhangzhg@neusoft.com <mailto:zhangzhg@neusoft.com>>
主 题:[Starlingx-discuss] 【StarlingX】Regarding external networking issue
*Hi StarlingX team*
we have deploy virtual All-in-one simplex machine and have a question to ask for help.
*1. problem:*
we met a problem with how to connect the external networking in cirros or centos instance.
*2. current status*
controller-0 IP: 10.10.10.3
cirros-vm1 IP: 172.16.100.188,
from 172.16.100.188(cirros-vm1) ping external subnet
ext_net:10.10.10.190 OK,
from 172.16.100.188(cirros-vm1) ping 10.10.10.3 (controller-0) is not OK.
from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is not OK.
from 10.10.10.3 (controller-0) ping 8.8.8.8 is OK.
*3. configuration*
(1) ml2_conf.ini
in container: neutron-ovs-agent-controller-0-937646f6-dtqcn:
/etc/neutron/plugins/ml2/ml2_conf.ini
-----------[file:ml2_conf.ini]--[begin]----------
/[agent]/
/extensions =/
/[ml2]/
/extension_drivers = port_security/
/mechanism_drivers = openvswitch,sriovnicswitch,l2population/
/path_mtu = 0/
/physical_network_mtus = physnet0:1500,physnet1:1500 tenant_network_types = vlan,vxlan type_drivers = flat,vlan,vxlan [ml2_type_flat] flat_networks = [ml2_type_vxlan] vni_ranges = vxlan_group = [ovs_driver] vhost_user_enabled = true [securitygroup] firewall_driver = openvswitch/
-----------[file:ml2_conf.ini]--[end]----------
(2) the networking topology refer below pic or the attached file.
*4.infer:*
we need to create a bridge to connect with the external subnet with the external networking.
*5.requirement:*
We want to ask how to configure to connect external networking in cirros-vm1 or centos instance?
we expect result as below:
from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is OK.
Best Regards
Wish you happy everyday!
--------------------------------
Yong.Fu- Neusoft
--------------------------------------------------------------------------------------------------- Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and may be confidential and/or privileged of Neusoft Corporation, its subsidiaries and/or its affiliates. If any reader of this communication is not the intended recipient, unauthorized use, forwarding, printing, storing, disclosure or copying is strictly prohibited, and may be unlawful.If you have received this communication in error,please immediately notify the sender by return e-mail, and delete the original message and all copies from your system. Thank you. ---------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------- Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and may be confidential and/or privileged of Neusoft Corporation, its subsidiaries and/or its affiliates. If any reader of this communication is not the intended recipient, unauthorized use, forwarding, printing, storing, disclosure or copying is strictly prohibited, and may be unlawful.If you have received this communication in error,please immediately notify the sender by return e-mail, and delete the original message and all copies from your system. Thank you. ---------------------------------------------------------------------------------------------------
Hi, Lilong You should have two solutions, 1. Add a routine path to 172.16.100.0/24 in your external router (192.168.3.0/24), it's very clear the outgoing icmp can not find the way back. 2. Add NAT rule for 172.16.100.0/24 in host, controller-0? Best Regard ------------------------------------------------------------------ 发件人:lilong-neu <lilong-neu@neusoft.com> 发送时间:2019年10月30日(星期三) 10:50 收件人:钱江 <qianjiang@baicells.com>; starlingx-discuss <starlingx-discuss@lists.starlingx.io> 抄 送:"Xie, Cindy" <cindy.xie@intel.com>; 付勇 <fuyong@neusoft.com>; zhaos <zhaos@neusoft.com>; "Lin, Shuicheng" <shuicheng.lin@intel.com>; "Sun, Austin" <austin.sun@intel.com>; 张志国 <zhangzhg@neusoft.com> 主 题:Re: 回复:[Starlingx-discuss] 【StarlingX】Regarding external networking issue Hi Qianjiang We have create the external subnet and Router. the external subnet is ext_net. the Router is configured as below the networking topology is as below the CMD "ip netns list" is as below the external networking is 192.168.3.0/24, gateway is 192.168.3.3. it is our real networking for access internet. from 172.16.100.188(cirros-vm1) ping external subnet ext_net:192.168.3.137 OK, from 172.16.100.188(cirros-vm1) ping 172.16.101.201 ((cirros-vm3)) is OK. from 172.16.100.188(cirros-vm1) ping 10.10.10.3 (controller-0) is not OK. from 172.16.100.188(cirros-vm1) ping 192.168.3.106 is not OK. from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is not OK. from 10.10.10.3 (controller-0) ping 8.8.8.8 is OK. from 10.10.10.3 (controller-0) ping 192.168.3.106 is OK. But we can't connect external networking yet from cirros instance, we will refer to
There are some check point : Which NIC ext-net is connected ? Which bridge this NIC is connected to on host ? Does this bridge config ip address (should be 192.168.3.1)? And have you config any security group to enable icmp ? Thanks. BR Austin Sun.
we will share our progress if any result. Thanks&Best Regards Long On 2019/10/29 下午9:26, Xie, Cindy wrote:
Thanks Qian Jiang, @付勇, not sure if this addressed your question or not, please let us know if any additional help needed. Thx. - cindy From: 钱江 <qianjiang@baicells.com> Sent: Monday, October 28, 2019 7:14 PM To: 付勇 <fuyong@neusoft.com>; starlingx-discuss <starlingx-discuss@lists.starlingx.io> Cc: zhaos <zhaos@neusoft.com>; lilong-neu <lilong-neu@neusoft.com>; Xie, Cindy <cindy.xie@intel.com>; Lin, Shuicheng <shuicheng.lin@intel.com>; Sun, Austin <austin.sun@intel.com>; 张志国 <zhangzhg@neusoft.com> Subject: 回复:[Starlingx-discuss] 【StarlingX】Regarding external networking issue Hi, Fuyong I wish you would allow me to write you even I am not from the StarlingX team :-) From your description of your environment, I guess, . cirros-vm1 (IP: 172.16.100.188) is build over management network (10.10.10.0/24) The cirros-vm1 should have its own router (the gateway should be 172.16.100.1), and this Gateway (172.16.100.1) should be routed through an external network. Then where is your external network? You should check your openstack routers, you may find it from "ip netns list", the router should be implemented using a network namespace, just check them. Hope it help Best Regard ------------------------------------------------------------------ 发件人:付勇 <fuyong@neusoft.com> 发送时间:2019年10月25日(星期五) 17:58 收件人:starlingx-discuss <starlingx-discuss@lists.starlingx.io> 抄 送:zhaos <zhaos@neusoft.com>; lilong-neu <lilong-neu@neusoft.com>; cindy.xie <cindy.xie@intel.com>; shuicheng.lin <shuicheng.lin@intel.com>; austin.sun <austin.sun@intel.com>; 张志国 <zhangzhg@neusoft.com> 主 题:[Starlingx-discuss] 【StarlingX】Regarding external networking issue Hi StarlingX team we have deploy virtual All-in-one simplex machine and have a question to ask for help. 1. problem: we met a problem with how to connect the external networking in cirros or centos instance. 2. current status controller-0 IP: 10.10.10.3 cirros-vm1 IP: 172.16.100.188, from 172.16.100.188(cirros-vm1) ping external subnet ext_net:10.10.10.190 OK, from 172.16.100.188(cirros-vm1) ping 10.10.10.3 (controller-0) is not OK. from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is not OK. from 10.10.10.3 (controller-0) ping 8.8.8.8 is OK. 3. configuration (1) ml2_conf.ini in container: neutron-ovs-agent-controller-0-937646f6-dtqcn: /etc/neutron/plugins/ml2/ml2_conf.ini -----------[file:ml2_conf.ini]--[begin]---------- [agent] extensions = [ml2] extension_drivers = port_security mechanism_drivers = openvswitch,sriovnicswitch,l2population path_mtu = 0 physical_network_mtus = physnet0:1500,physnet1:1500 tenant_network_types = vlan,vxlan type_drivers = flat,vlan,vxlan [ml2_type_flat] flat_networks = [ml2_type_vxlan] vni_ranges = vxlan_group = [ovs_driver] vhost_user_enabled = true [securitygroup] firewall_driver = openvswitch -----------[file:ml2_conf.ini]--[end]---------- (2) the networking topology refer below pic or the attached file. 4.infer: we need to create a bridge to connect with the external subnet with the external networking. 5.requirement: We want to ask how to configure to connect external networking in cirros-vm1 or centos instance? we expect result as below: from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is OK. Best Regards Wish you happy everyday! -------------------------------- Yong.Fu- Neusoft --------------------------------------------------------------------------------------------------- Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and may be confidential and/or privileged of Neusoft Corporation, its subsidiaries and/or its affiliates. If any reader of this communication is not the intended recipient, unauthorized use, forwarding, printing, storing, disclosure or copying is strictly prohibited, and may be unlawful.If you have received this communication in error,please immediately notify the sender by return e-mail, and delete the original message and all copies from your system. Thank you. --------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------- Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) is intended only for the use of the intended recipient and may be confidential and/or privileged of Neusoft Corporation, its subsidiaries and/or its affiliates. If any reader of this communication is not the intended recipient, unauthorized use, forwarding, printing, storing, disclosure or copying is strictly prohibited, and may be unlawful.If you have received this communication in error,please immediately notify the sender by return e-mail, and delete the original message and all copies from your system. Thank you. ---------------------------------------------------------------------------------------------------
participants (4)
-
lilong-neu
-
Xie, Cindy
-
付勇
-
钱江