<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><br><br><div style="text-align:right;direction:rtl"><br></div></div><div><br>On 6 באוג׳ 2015, at 20:30, Dan Sneddon <<a href="mailto:dsneddon@redhat.com">dsneddon@redhat.com</a>> wrote:<br><br></div><blockquote type="cite"><div><span>On 08/06/2015 11:21 AM, Dan Sneddon wrote:</span><br><blockquote type="cite"><span>On 08/06/2015 03:34 AM, ICHIBA Sara wrote:</span><br></blockquote><blockquote type="cite"><blockquote type="cite"><span>Hello guys,</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>I'm trying to add a second external network to my openstack. I followed</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>the documentation, created a new router and set the new gateway. I</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>can't ping my external gateway from my router namespace  and I can ping</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>this gateway from my server.</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>I kept comparing the configuration of my new external gateway (which</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>doesn't work in neutron) and my oldest one (which keeps working) and</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>noticed that when I set a gateway to my router this creates a port with</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>a name that bigins with qg. Normally this port has to be assigned to</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>the external bridge (in my case it should be the new external bridge</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>br-eth2). BUT what I saw is that this port qg-xxx is mapped instead to</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>the br-int.</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>For more explanation please see my confs and some command outputs:</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller templates(keystone_admin)]# neutron net-external-list</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>+--------------------------------------+-------------------+------------------------------------------------------+</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>| id                                   | name              |</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>subnets                                              |</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>+--------------------------------------+-------------------+------------------------------------------------------+</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>| 59c6f54f-26e3-4360-8a05-1a63285c846c | public            |</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>6744a5b3-1a33-42ae-8ae7-1467ebdc1b13 <a href="http://192.168.5.0/24">192.168.5.0/24</a></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span><<a href="http://192.168.5.0/24">http://192.168.5.0/24</a>>  |</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>| 7ee9f199-2c22-42a9-a6af-1b06c2d62a35 | ruckus_management |</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>cba357ee-f9a7-49f3-89e4-9f5d864747cd <a href="http://192.168.31.0/24">192.168.31.0/24</a></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span><<a href="http://192.168.31.0/24">http://192.168.31.0/24</a>> |</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>+--------------------------------------+-------------------+------------------------------------------------------+</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>****this router with its gateway are working***</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller templates(keystone_admin)]# ip netns exec</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>qrouter-e8243f85-4c56-47bd-a1ee-40724a861dc6 ip a</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet <a href="http://127.0.0.1/8">127.0.0.1/8</a> <<a href="http://127.0.0.1/8">http://127.0.0.1/8</a>> scope host lo</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet6 ::1/128 scope host</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>25: qr-2b96e8b6-38: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>noqueue state UNKNOWN</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    link/ether fa:16:3e:b5:54:4d brd ff:ff:ff:ff:ff:ff</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet <a href="http://10.0.0.1/24">10.0.0.1/24</a> <<a href="http://10.0.0.1/24">http://10.0.0.1/24</a>> brd 10.0.0.255 scope global</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>qr-2b96e8b6-38</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet6 fe80::f816:3eff:feb5:544d/64 scope link</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>26: qr-9e50bd2e-fa: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>noqueue state UNKNOWN</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    link/ether fa:16:3e:fc:06:9b brd ff:ff:ff:ff:ff:ff</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet <a href="http://20.0.0.1/24">20.0.0.1/24</a> <<a href="http://20.0.0.1/24">http://20.0.0.1/24</a>> brd 20.0.0.255 scope global</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>qr-9e50bd2e-fa</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet6 fe80::f816:3eff:fefc:69b/64 scope link</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>27: qg-cd45a565-0b: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>noqueue state UNKNOWN</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    link/ether fa:16:3e:20:81:60 brd ff:ff:ff:ff:ff:ff</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet <a href="http://192.168.5.100/24">192.168.5.100/24</a> <<a href="http://192.168.5.100/24">http://192.168.5.100/24</a>> brd 192.168.5.255</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>scope global qg-cd45a565-0b</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet <a href="http://192.168.5.101/32">192.168.5.101/32</a> <<a href="http://192.168.5.101/32">http://192.168.5.101/32</a>> brd 192.168.5.101</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>scope global qg-cd45a565-0b</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet <a href="http://192.168.5.103/32">192.168.5.103/32</a> <<a href="http://192.168.5.103/32">http://192.168.5.103/32</a>> brd 192.168.5.103</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>scope global qg-cd45a565-0b</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet6 fe80::f816:3eff:fe20:8160/64 scope link</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>************* this is the new router and gateway that I configured and</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>they are not working</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller templates(keystone_admin)]# ip netns exec</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>qrouter-b3c51abb-4a14-4af2-ae72-b41e7cba4e84 ip a</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet <a href="http://127.0.0.1/8">127.0.0.1/8</a> <<a href="http://127.0.0.1/8">http://127.0.0.1/8</a>> scope host lo</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet6 ::1/128 scope host</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>38: qg-6406f3e3-72: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>noqueue state UNKNOWN</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    link/ether fa:16:3e:63:48:64 brd ff:ff:ff:ff:ff:ff</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet <a href="http://192.168.31.70/24">192.168.31.70/24</a> <<a href="http://192.168.31.70/24">http://192.168.31.70/24</a>> brd 192.168.31.255</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>scope global qg-6406f3e3-72</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    inet6 fe80::f816:3eff:fe63:4864/64 scope link</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>       valid_lft forever preferred_lft forever</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller templates(keystone_admin)]# ovs-vsctl show</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>9b3e4cc7-6761-483e-a538-1a132734d1a5</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    Bridge br-tun</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port br-tun</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface br-tun</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "vxlan-c0a80523"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "vxlan-c0a80523"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: vxlan</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                options: {df_default="true", in_key=flow,</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>local_ip="192.168.5.34", out_key=flow, remote_ip="192.168.5.35"}</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port patch-int</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface patch-int</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: patch</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                options: {peer=patch-tun}</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    Bridge "br-eth2"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "phy-br-eth2"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "phy-br-eth2"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: patch</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                options: {peer="int-br-eth2"}</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "eth2"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "eth2"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "br-eth2"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "br-eth2"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    Bridge br-int</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        fail_mode: secure</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "qr-9e50bd2e-fa"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            tag: 1</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "qr-9e50bd2e-fa"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "tap61f76964-85"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            tag: 1</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "tap61f76964-85"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "qvo0952a802-99"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            tag: 2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "qvo0952a802-99"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "qvo5cc221dc-e8"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            tag: 1</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "qvo5cc221dc-e8"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "tap599b2f77-21"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            tag: 4095</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "tap599b2f77-21"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "tapa383b7ae-99"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            tag: 2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "tapa383b7ae-99"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "tapbea1a763-0b"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            tag: 2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "tapbea1a763-0b"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "qr-2b96e8b6-38"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            tag: 2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "qr-2b96e8b6-38"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port int-br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface int-br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: patch</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                options: {peer=phy-br-ex}</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "qg-6406f3e3-72"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            tag: 9</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "qg-6406f3e3-72"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port patch-tun</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface patch-tun</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: patch</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                options: {peer=patch-int}</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "int-br-eth2"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "int-br-eth2"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: patch</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                options: {peer="phy-br-eth2"}</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port br-int</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface br-int</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    Bridge br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "qg-cd45a565-0b"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "qg-cd45a565-0b"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: internal</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port "eth0"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface "eth0"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>        Port phy-br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>            Interface phy-br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                type: patch</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>                options: {peer=int-br-ex}</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>    ovs_version: "2.3.1"</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller templates(keystone_admin)]#</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>************************fichiers de conf*********************</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller neutron]#  cat l3_agent.ini | grep -v ^# | grep -v ^$</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[DEFAULT]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>debug = False</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>interface_driver =neutron.agent.linux.</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>interface.OVSInterfaceDriver</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>use_namespaces = True</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>gateway_external_network_id =</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>handle_internal_only_routers = True</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>external_network_bridge =</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>metadata_port = 9697</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>send_arp_for_ha = 3</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>periodic_interval = 40</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>periodic_fuzzy_delay = 5</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>enable_metadata_proxy = True</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>router_delete_namespaces = False</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>agent_mode = legacy</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>allow_automatic_l3agent_failover=False</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>root@OScontroller neutron]# cat plugin.ini | grep -v ^# | grep -v ^$</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[ml2]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>type_drivers = vxlan</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>tenant_network_types = vxlan</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>mechanism_drivers =openvswitch</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[ml2_type_flat]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[ml2_type_vlan]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[ml2_type_gre]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[ml2_type_vxlan]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>vni_ranges =10:100</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>vxlan_group =224.0.0.1</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[securitygroup]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>enable_security_group = True</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller openvswitch]# cat ovs_neutron_plugin.ini | grep -v</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>^# | grep -v ^$</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[ovs]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>enable_tunneling = True</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>integration_bridge = br-int</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>tunnel_bridge = br-tun</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>local_ip =192.168.5.34</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>network_vlan_ranges = physnet1,physnet2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>bridge_mappings =physnet1:br-ex,physnet2:br-eth2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[agent]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>polling_interval = 2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>tunnel_types =vxlan</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>vxlan_udp_port =4789</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>l2_population = False</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>arp_responder = False</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>enable_distributed_routing = False</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[securitygroup]</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>firewall_driver =</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller network-scripts]# cat ifcfg-eth0</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>NAME=eth0</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>UUID=1b3a9854-df55-43cf-a9b8-21c1a9cc1e5b</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DEVICE=eth0</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>HWADDR=44:1e:a1:75:ea:d6</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DEVICETYPE=ovs</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>OVS_BRIDGE=br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>ONBOOT=yes</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>TYPE=OVSPort</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>NM_CONTROLLED=yes</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller network-scripts]# cat ifcfg-eth2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>NAME=eth2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DEVICE=eth2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>HWADDR=44:1e:a1:75:ea:d2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DEVICETYPE=ovs</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>OVS_BRIDGE=br-eth2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>ONBOOT=yes</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>TYPE=OVSPort</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>NM_CONTROLLED=yes</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller network-scripts]# cat ifcfg-br-eth2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DEVICE=br-eth2</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DEVICETYPE=ovs</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>TYPE=OVSBridge</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>BOOTPROTO=static</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>IPADDR=192.168.31.34</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>NETMASK=255.255.255.0</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>ONBOOT=yes</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>GATEWAY=192.168.31.1</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DNS1=8.8.8.8</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>[root@OScontroller network-scripts]# cat ifcfg-br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DEVICE=br-ex</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DEVICETYPE=ovs</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>TYPE=OVSBridge</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>BOOTPROTO=static</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>IPADDR=192.168.5.34</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>NETMASK=255.255.255.0</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>ONBOOT=yes</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>GATEWAY=192.168.5.1</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DNS1=8.8.8.8</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>DNS2=192.168.5.1</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Thank you for your help,</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Sara</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>_______________________________________________</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>Rdo-list mailing list</span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span><a href="mailto:Rdo-list@redhat.com">Rdo-list@redhat.com</a></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span><a href="https://www.redhat.com/mailman/listinfo/rdo-list">https://www.redhat.com/mailman/listinfo/rdo-list</a></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span>To unsubscribe: <a href="mailto:rdo-list-unsubscribe@redhat.com">rdo-list-unsubscribe@redhat.com</a></span><br></blockquote></blockquote><blockquote type="cite"><blockquote type="cite"><span></span><br></blockquote></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>In /etc/neutron/l3_agent.ini, there is a setting which influences the</span><br></blockquote><blockquote type="cite"><span>use of the external bridge:</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>external_network_bridge =</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>If this is set to 'br-ex', then the floating IP network is tied to</span><br></blockquote><blockquote type="cite"><span>br-ex, and you can have only one floating IP network.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>If on the other hand, this setting is blank, then the floating IP</span><br></blockquote><blockquote type="cite"><span>networks get patched into br-int, and you can have as many as you want.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>The bridges that do get used for the floating IP networks should be</span><br></blockquote><blockquote type="cite"><span>included in the bridge mappings.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>What I would do in your case is to rename the br-ex bridge to something</span><br></blockquote><blockquote type="cite"><span>else (br-eth1?). Then your bridge mappings becomes:</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>/etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini:</span><br></blockquote><blockquote type="cite"><span>bridge_mappings =physnet1:br-eth1,physnet2:br-eth2</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><blockquote type="cite"><span>You will have to delete br-ex, add br-eth1 (or whatever is</span><br></blockquote><blockquote type="cite"><span>appropriate), and then add the interface to the new bridge. Change the</span><br></blockquote><blockquote type="cite"><span>Neutron plugin files, and restart the Neutron services.</span><br></blockquote><blockquote type="cite"><span></span><br></blockquote><span></span><br><span>Actually, now that I think about it, you might be able to get away with</span><br><span>leaving the bridge named br-ex, as long as the external_network_bridge</span><br><span>is set to ''. This isn't tested, though, and I wouldn't be terribly</span><br><span>surprised if Neutron didn't like that.</span><br></div></blockquote><div><br></div><div>As long as external_network_bridge is set to blank, it doesn't matter how you name your bridges, as long as they are configured correctly in your L2 agent bridge mappings.</div><br><blockquote type="cite"><div><span></span><br><span>We have a combination of command-line parameters and Heat parameters</span><br><span>that will set up the overcloud for multiple floating IP nets at</span><br><span>deployment time. First of all, the external_network_bridge can be set</span><br><span>in the network-environment.yaml file:</span><br><span></span><br><span>parameters:</span><br><span>  Controller-1::NeutronExternalNetworkBridge: "''"</span><br><span></span><br><span>parameter_defaults:</span><br><span>  NeutronExternalNetworkBridge: "''"</span><br><span></span><br><span>Then, in the controller.yaml NIC template, you will want the external</span><br><span>network on a bridge that is named appropriately (not br-ex).</span><br><span></span><br><span>Finally, when you deploy, use the --neutron-bridge-mappings parameter:</span><br><span></span><br><span>openstack overcloud deploy \</span><br><span>--neutron-bridge-mappings physnet1:br-eth1,physnet2:br-eth2 \</span><br><span>-e</span><br><span>/usr/share/openstack-tripleo-heat-templates/environments/network-isolation.yaml</span><br><span>\</span><br><span>-e /home/stack/network-isolation.yaml \</span><br><span>[Other params...]</span><br><span></span><br><span>You will still need to create the floating IP networks after</span><br><span>deployment, we no longer do that at deployment time.</span><br><span></span><br><span>-- </span><br><span>Dan Sneddon         |  Principal OpenStack Engineer</span><br><span><a href="mailto:dsneddon@redhat.com">dsneddon@redhat.com</a> |  <a href="http://redhat.com/openstack">redhat.com/openstack</a></span><br><span>650.254.4025        |  dsneddon:irc   @dxs:twitter</span><br><span></span><br><span>_______________________________________________</span><br><span>Rdo-list mailing list</span><br><span><a href="mailto:Rdo-list@redhat.com">Rdo-list@redhat.com</a></span><br><span><a href="https://www.redhat.com/mailman/listinfo/rdo-list">https://www.redhat.com/mailman/listinfo/rdo-list</a></span><br><span></span><br><span>To unsubscribe: <a href="mailto:rdo-list-unsubscribe@redhat.com">rdo-list-unsubscribe@redhat.com</a></span><br></div></blockquote></body></html>