[Starlingx-discuss] 回复：回复： 【StarlingX】Regarding external networking issue

钱江 qianjiang at baicells.com
Wed Oct 30 10:41:07 UTC 2019 

       Hi, Lilong
       You should have two solutions,
       1. Add a routine path to 172.16.100.0/24 in your external router (192.168.3.0/24), it's very clear the outgoing icmp can not find the way back.
       2. Add NAT rule for 172.16.100.0/24 in host, controller-0?
      Best Regard


------------------------------------------------------------------
发件人：lilong-neu <lilong-neu at neusoft.com>
发送时间：2019年10月30日(星期三) 10:50
收件人：钱江 <qianjiang at baicells.com>; starlingx-discuss <starlingx-discuss at lists.starlingx.io>
抄　送："Xie, Cindy" <cindy.xie at intel.com>; 付勇 <fuyong at neusoft.com>; zhaos <zhaos at neusoft.com>; "Lin, Shuicheng" <shuicheng.lin at intel.com>; "Sun, Austin" <austin.sun at intel.com>; 张志国 <zhangzhg at neusoft.com>
主　题：Re: 回复：[Starlingx-discuss] 【StarlingX】Regarding external networking issue

Hi Qianjiang

 We have create the external subnet and Router.
 the external subnet is ext_net.


 the Router is configured as below

the networking topology is as below

 the CMD "ip netns list" is as below

the external networking is 192.168.3.0/24, gateway is 192.168.3.3. it is our real networking for access internet. 
 from 172.16.100.188(cirros-vm1) ping external subnet ext_net:192.168.3.137 OK,
 from 172.16.100.188(cirros-vm1) ping 172.16.101.201 ((cirros-vm3)) is OK.
 from 172.16.100.188(cirros-vm1) ping 10.10.10.3 (controller-0) is not OK.
 from 172.16.100.188(cirros-vm1) ping 192.168.3.106 is not OK.
 from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is not OK.
 from 10.10.10.3 (controller-0) ping 8.8.8.8 is OK.
 from 10.10.10.3 (controller-0) ping 192.168.3.106 is OK.
But we can't connect external networking yet from cirros instance, we will refer to
>>>>>
There are some check point :   
Which NIC ext-net is connected ?   
Which bridge this NIC is connected to on host ?   
Does this bridge config ip address (should be 192.168.3.1)?  
And have you config any security group to enable icmp ?   
Thanks. BR
 Austin Sun. 
>>>>
we will share our progress if any result.
Thanks&Best Regards
Long
On 2019/10/29 下午9:26, Xie, Cindy wrote:
 
Thanks Qian Jiang,
@付勇, not sure if this addressed your question or not, please let us know if any additional help needed.
 
Thx. - cindy
 
From: 钱江 <qianjiang at baicells.com> 
Sent: Monday, October 28, 2019 7:14 PM
To: 付勇 <fuyong at neusoft.com>; starlingx-discuss <starlingx-discuss at lists.starlingx.io>
Cc: zhaos <zhaos at neusoft.com>; lilong-neu <lilong-neu at neusoft.com>; Xie, Cindy <cindy.xie at intel.com>; Lin, Shuicheng <shuicheng.lin at intel.com>; Sun, Austin <austin.sun at intel.com>; 张志国 <zhangzhg at neusoft.com>
Subject: 回复：[Starlingx-discuss] 【StarlingX】Regarding external networking issue
       Hi, Fuyong 
           I wish you would allow me to write you even I am not from the StarlingX team :-) 
           From your description of your environment, I guess, 
           . cirros-vm1 (IP: 172.16.100.188) is build over management network (10.10.10.0/24) 
                
              The cirros-vm1 should have its own router (the gateway should be 172.16.100.1), and this Gateway (172.16.100.1) should be routed through an external network. 
              Then where is your external network? 
  
              You should check your openstack routers, you may find it from "ip netns list", the router should be implemented using a network namespace, just check them.                 
  
       Hope it help 
       Best Regard 
  
------------------------------------------------------------------ 
发件人：付勇 <fuyong at neusoft.com> 
发送时间：2019年10月25日(星期五) 17:58 
收件人：starlingx-discuss <starlingx-discuss at lists.starlingx.io> 
抄　送：zhaos <zhaos at neusoft.com>; lilong-neu <lilong-neu at neusoft.com>; cindy.xie <cindy.xie at intel.com>; shuicheng.lin <shuicheng.lin at intel.com>; austin.sun <austin.sun at intel.com>; 张志国 <zhangzhg at neusoft.com> 
主　题：[Starlingx-discuss] 【StarlingX】Regarding external networking issue 
  
Hi StarlingX team
we have deploy virtual All-in-one simplex machine and have a question to ask for help.
 
1. problem:
we met a problem with how to connect the external networking in cirros or centos instance.
 
2. current status
controller-0 IP: 10.10.10.3
cirros-vm1 IP: 172.16.100.188,
from 172.16.100.188(cirros-vm1) ping external subnet
ext_net:10.10.10.190 OK,
from 172.16.100.188(cirros-vm1) ping 10.10.10.3 (controller-0) is not OK.
from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is not OK.
from 10.10.10.3 (controller-0) ping 8.8.8.8 is OK.
 
3. configuration
(1) ml2_conf.ini
in container: neutron-ovs-agent-controller-0-937646f6-dtqcn: 
/etc/neutron/plugins/ml2/ml2_conf.ini
-----------[file:ml2_conf.ini]--[begin]----------
[agent]
extensions =
[ml2]
extension_drivers = port_security
mechanism_drivers = openvswitch,sriovnicswitch,l2population
path_mtu = 0
physical_network_mtus = physnet0:1500,physnet1:1500 tenant_network_types = vlan,vxlan type_drivers = flat,vlan,vxlan [ml2_type_flat] flat_networks = [ml2_type_vxlan] vni_ranges = vxlan_group = [ovs_driver] vhost_user_enabled = true [securitygroup] firewall_driver = openvswitch
-----------[file:ml2_conf.ini]--[end]----------
 
(2) the networking topology refer below pic or the attached file.

 
4.infer:
we need to create a bridge to connect with the external subnet with the external networking.
 
5.requirement:
We want to ask how to configure to connect external networking in cirros-vm1 or centos instance?
we expect result as below:
from 172.16.100.188(cirros-vm1) ping 8.8.8.8 is OK.
 
Best Regards
Wish you happy everyday!
--------------------------------
Yong.Fu- Neusoft
 
 
 
---------------------------------------------------------------------------------------------------
 Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) 
 is intended only for the use of the intended recipient and may be confidential and/or privileged of 
 Neusoft Corporation, its subsidiaries and/or its affiliates. If any reader of this communication is 
 not the intended recipient, unauthorized use, forwarding, printing,  storing, disclosure or copying 
 is strictly prohibited, and may be unlawful.If you have received this communication in error,please 
 immediately notify the sender by return e-mail, and delete the original message and all copies from 
 your system. Thank you. 
 ---------------------------------------------------------------------------------------------------
       
---------------------------------------------------------------------------------------------------
Confidentiality Notice: The information contained in this e-mail and any accompanying attachment(s) 
is intended only for the use of the intended recipient and may be confidential and/or privileged of 
Neusoft Corporation, its subsidiaries and/or its affiliates. If any reader of this communication is 
not the intended recipient, unauthorized use, forwarding, printing,  storing, disclosure or copying 
is strictly prohibited, and may be unlawful.If you have received this communication in error,please 
immediately notify the sender by return e-mail, and delete the original message and all copies from 
your system. Thank you. 
---------------------------------------------------------------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20191030/eb3c2f94/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pdehonffplebldnk.png
Type: application/octet-stream
Size: 38191 bytes
Desc: not available
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20191030/eb3c2f94/attachment-0005.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: fpibdcgeplkklgpa.png
Type: application/octet-stream
Size: 53616 bytes
Desc: not available
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20191030/eb3c2f94/attachment-0006.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: aaoepokfidmeoolm.png
Type: application/octet-stream
Size: 57120 bytes
Desc: not available
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20191030/eb3c2f94/attachment-0007.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: bkfaekjhcpjlgijb.png
Type: application/octet-stream
Size: 12496 bytes
Desc: not available
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20191030/eb3c2f94/attachment-0008.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: application/octet-stream
Size: 17924 bytes
Desc: not available
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20191030/eb3c2f94/attachment-0009.obj>

More information about the Starlingx-discuss mailing list