<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I am pretty close. I can load Cirros instance on Compute and run nslookup inside it. Everything is fine with IP's and routing. However , i cannot connect via ssh to both Cirros and Fedora 19 instances. Might it be gre tunnelling issue ? Details :-<br><br>On Controller :-<br><br>[root@ip-192-169-142-57 ~(keystone_admin)]$ neutron security-group-rule-create --protocol tcp \<br>> --port-range-min 22 --port-range-max 22 \<br>> --direction ingress --remote-ip-prefix 0.0.0.0/0 default<br>Multiple security_group matches found for name 'default', use an ID to be more specific.<br><br>[root@ip-192-169-142-57 ~(keystone_admin)]$ neutron security-group-list<br><br>+--------------------------------------+---------+-------------+<br>| id | name | description |<br>+--------------------------------------+---------+-------------+<br>| a085748d-92c0-40e0-a4c1-bc86935ec0ee | default | default |<br>| b6203882-561d-4f7b-9e2e-441c57e83419 | default | default |<br>| c70b80d3-f060-4002-af22-6603c745a6cf | default | default |<br>+--------------------------------------+---------+-------------+<br><br>[root@ip-192-169-142-57 ~(keystone_admin)]$ neutron security-group-rule-create --protocol tcp --port-range-min 22 --port-range-max 22 --direction ingress --remote-ip-prefix 0.0.0.0/0 a085748d-92c0-40e0-a4c1-bc86935ec0ee<br>409-{u'NeutronError': {u'message': u'Security group rule already exists. Group id is 6d15d6cc-ed13-4c26-89ff-7ff10e6c4656.', u'type': u'SecurityGroupRuleExists', u'detail': u''}}<br><br>[root@ip-192-169-142-57 ~(keystone_admin)]$ neutron security-group-rule-create --protocol tcp --port-range-min 22 --port-range-max 22 --direction ingress --remote-ip-prefix 0.0.0.0/0 b6203882-561d-4f7b-9e2e-441c57e83419<br>Created a new security_group_rule:<br><br>+-------------------+--------------------------------------+<br>| Field | Value |<br>+-------------------+--------------------------------------+<br>| direction | ingress |<br>| ethertype | IPv4 |<br>| id | 97232fb3-6ba1-46a3-a8e3-2f25ba0c70dc |<br>| port_range_max | 22 |<br>| port_range_min | 22 |<br>| protocol | tcp |<br>| remote_group_id | |<br>| remote_ip_prefix | 0.0.0.0/0 |<br>| security_group_id | b6203882-561d-4f7b-9e2e-441c57e83419 |<br>| tenant_id | 751cda6ede504ccd9562edd233b32b34 |<br>+-------------------+--------------------------------------+<br><br>[root@ip-192-169-142-57 ~(keystone_admin)]$ neutron floatingip-show \<br>3d40ed62-ad78-4042-8342-9f76c419c8c1<br><br>+---------------------+--------------------------------------+<br>| Field | Value |<br>+---------------------+--------------------------------------+<br>| fixed_ip_address | 10.0.0.2 |<br>| floating_ip_address | 192.169.142.105 |<br>| floating_network_id | 8e2df372-544d-4921-ad58-e164e5128410 |<br>| id | 3d40ed62-ad78-4042-8342-9f76c419c8c1 |<br>| port_id | 41da6b37-dfd8-49a2-8dae-45d9a99ef7d7 |<br>| router_id | ba157037-747e-4a44-84d5-13d7d30e88ac |<br>| tenant_id | 751cda6ede504ccd9562edd233b32b34 |<br>+---------------------+--------------------------------------+<br><br><br><br>[root@ip-192-169-142-57 ~(keystone_admin)]$ ssh -l fedora -i oskey1.priv 192.169.142.105<br><br>Hangs<br><br>I double checked iptables on compute node . It's OK<br><br><br><br><div>> Date: Fri, 17 Jan 2014 16:00:12 +0100<br>> From: kchamart@redhat.com<br>> To: bderzhavets@hotmail.com<br>> CC: rdo-list@redhat.com<br>> Subject: Re: [Rdo-list] Attempt to reproduce Getting Started with Multi-Node OpenStack RDO Havana + Gluster Backend + Neutron VLAN by Andrew Lau on F20 (2)<br>> <br>> On 01/16/2014 08:48 PM, Boris Derzhavets wrote:<br>> > Trying to reproduce :<br>> > http://kashyapc.fedorapeople.org/virt/openstack/Two-node-Havana-setup.txt <br>> <br>> Please note: this guide needs some more editing, it's more handy if one<br>> is at-least moderately aware what's going under the hood and can<br>> diagnose any network/routing problems.<br>> <br>> Also I was experimenting w/ Neutron/GRE when I wrote the above - which<br>> doesn't require two interfaces.<br>> <br>> <br>> -- <br>> /kashyap<br></div> </div></body>
</html>