hey there, I'm trying to configure two provider network for openstack. I'm using the same l3 agent. the first external network is connected to eth1 via br-eth1 and the second is connected to eth0 via br-ex. You can find below my configuration. My problem is that I can't ping the external gateways from my routers =============[root@localhost ~]# ovs-vsctl show 03e9d933-8477-46eb-8718-0b4c11c0968d Bridge "br-eth1" Port "phy-br-eth1" Interface "phy-br-eth1" type: patch options: {peer="int-br-eth1"} Port "eth1" Interface "eth1" Port "br-eth1" Interface "br-eth1" type: internal Bridge br-int fail_mode: secure Port "int-br-eth1" Interface "int-br-eth1" type: patch options: {peer="phy-br-eth1"} Port "qvod5cf0403-f0" tag: 2 Interface "qvod5cf0403-f0" Port "tap56770cf6-b4" tag: 2 Interface "tap56770cf6-b4" type: internal Port br-int Interface br-int type: internal Port "tape1cc9d1e-27" tag: 1 Interface "tape1cc9d1e-27" type: internal Port "qg-ab484fdf-8a" tag: 3 Interface "qg-ab484fdf-8a" type: internal Port "qr-2c33255e-e5" tag: 1 Interface "qr-2c33255e-e5" type: internal Port int-br-ex Interface int-br-ex type: patch options: {peer=phy-br-ex} Port "qr-8a30f016-85" tag: 2 Interface "qr-8a30f016-85" type: internal Port "qg-559f3ce6-f8" tag: 4 Interface "qg-559f3ce6-f8" type: internal Port patch-tun Interface patch-tun type: patch options: {peer=patch-int} Bridge br-tun Port patch-int Interface patch-int type: patch options: {peer=patch-tun} Port br-tun Interface br-tun type: internal Bridge br-ex Port phy-br-ex Interface phy-br-ex type: patch options: {peer=int-br-ex} Port "eth0" Interface "eth0" Port br-ex Interface br-ex type: internal ovs_version: "2.3.1" ===========[root@localhost openvswitch]# cat ovs_neutron_plugin.ini | grep -v ^# | grep -v ^$ [ovs] enable_tunneling = True network_vlan_ranges = physnet1,physnet2 bridge_mappings = physnet1:br-ex,physnet2:br-eth1 integration_bridge = br-int tunnel_bridge = br-tun local_ip =192.168.5.233 [agent] polling_interval = 2 tunnel_types =vxlan vxlan_udp_port =4789 l2_population = False arp_responder = False enable_distributed_routing = False [securitygroup] firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver ===========[root@localhost neutron]# cat plugin.ini | grep -v ^# | grep -v ^$ [ml2] type_drivers = vxlan tenant_network_types = vxlan mechanism_drivers =openvswitch [ml2_type_flat] [ml2_type_vlan] [ml2_type_gre] [ml2_type_vxlan] vni_ranges =10:100 vxlan_group =224.0.0.1 [securitygroup] enable_security_group = True [ovs] network_vlan_ranges = physnet1,physnet2 bridge_mappings = physnet1:br-ex,physnet2:br-eth2 =========[root@localhost neutron]# cat l3_agent.ini | grep -v ^# | grep -v ^$ [DEFAULT] debug = False interface_driver =neutron.agent.linux.interface.OVSInterfaceDriver use_namespaces = True handle_internal_only_routers = True metadata_port = 9697 send_arp_for_ha = 3 periodic_interval = 40 periodic_fuzzy_delay = 5 enable_metadata_proxy = True router_delete_namespaces = False agent_mode = legacy allow_automatic_l3agent_failover=False =========root@localhost ~(keystone_admin)]# ip netns exec qrouter-4b6bf66a-296e-4cc1-ba0f-1b88a9ed621a ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 29: qr-8a30f016-85: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN link/ether fa:16:3e:9e:6a:e0 brd ff:ff:ff:ff:ff:ff inet 20.0.0.1/24 brd 20.0.0.255 scope global qr-8a30f016-85 valid_lft forever preferred_lft forever inet6 fe80::f816:3eff:fe9e:6ae0/64 scope link valid_lft forever preferred_lft forever 42: qg-559f3ce6-f8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN link/ether fa:16:3e:c5:c5:3d brd ff:ff:ff:ff:ff:ff inet 192.168.31.71/24 brd 192.168.31.255 scope global qg-559f3ce6-f8 valid_lft forever preferred_lft forever inet 192.168.31.70/32 brd 192.168.31.70 scope global qg-559f3ce6-f8 valid_lft forever preferred_lft forever inet6 fe80::f816:3eff:fec5:c53d/64 scope link valid_lft forever preferred_lft forever ============[root@localhost neutron]# ip netns exec qrouter-e8040286-4aef-4875-b0e1-acc1c5e2e71a ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 14: qr-2c33255e-e5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN link/ether fa:16:3e:11:49:d8 brd ff:ff:ff:ff:ff:ff inet 10.0.0.1/24 brd 10.0.0.255 scope global qr-2c33255e-e5 valid_lft forever preferred_lft forever inet6 fe80::f816:3eff:fe11:49d8/64 scope link valid_lft forever preferred_lft forever 15: qg-ab484fdf-8a: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN link/ether fa:16:3e:51:fb:16 brd ff:ff:ff:ff:ff:ff inet 192.168.5.240/24 brd 192.168.5.255 scope global qg-ab484fdf-8a valid_lft forever preferred_lft forever inet6 fe80::f816:3eff:fe51:fb16/64 scope link valid_lft forever preferred_lft forever =====[root@localhost neutron]# cat /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 HWADDR=00:0c:29:0a:d1:16 DEVICETYPE=ovs OVS_BRIDGE=br-ex ONBOOT=yes TYPE=OVSPort NM_CONTROLLED=yes ===== [root@localhost neutron]# cat /etc/sysconfig/network-scripts/ifcfg-br-ex DEVICE=br-ex DEVICETYPE=ovs TYPE=OVSBridge BOOTPROTO=static IPADDR=192.168.5.233 NETMASK=255.255.255.0 ONBOOT=yes GATEWAY=192.168.5.1 DNS1=8.8.8.8 DNS2=192.168.5.1 ========[root@localhost neutron]# cat /etc/sysconfig/network-scripts/ifcfg-br-eth1 DEVICE=br-eth1 DEVICETYPE=ovs TYPE=OVSBridge BOOTPROTO=static IPADDR=192.168.31.233 NETMASK=255.255.255.0 ONBOOT=yes GATEWAY=192.168.31.1 DNS1=8.8.8.8 =====[root@localhost neutron]# cat /etc/sysconfig/network-scripts/ifcfg-eth1 DEVICE=eth1 HWADDR=00:0c:29:0a:d1:20 DEVICETYPE=ovs OVS_BRIDGE=br-eth1 ONBOOT=yes TYPE=OVSPort NM_CONTROLLED=yes In advance,thank you for your help B.regards, Sara