Guest User

Untitled

a guest
Dec 22nd, 2011
49
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.57 KB | None | 0 0
  1. COMPUTER #1:
  2. --------------------
  3. IP: 192.168.100.241
  4. RUNS: nova-controller, nova-network and one nova-compute
  5. IPTABLES:
  6. iptables -T nat -A POSTROUTING -o eth0 -j MASQUERADE
  7. iptables -A FORWARD -i br100 -o eth0 -j ACCEPT
  8. iptables -A FORWARD -i eth0 -o br100 -m state --state RELATED,ESTABILISHED -j ACCEPT
  9.  
  10. ROUTE:
  11. Destination Gateway Genmask Flags Metric Ref Use Iface
  12. 0.0.0.0 192.168.100.1 0.0.0.0 UG 0 0 0 br100
  13. 10.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 br100
  14. 192.168.100.0 0.0.0.0 255.255.255.0 U 0 0 0 br100
  15. 192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
  16.  
  17. COMPUTER #2:
  18. --------------------
  19. IP: 192.168.100.239
  20. RUNS: nova-compute
  21. IPTABLES:
  22. Didn't set anything.
  23.  
  24. ROUTE:
  25. 0.0.0.0 192.168.100.1 0.0.0.0 UG 0 0 0 br100
  26. 192.168.100.0 0.0.0.0 255.255.255.0 U 0 0 0 br100
  27. 192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
  28.  
  29. OTHERS:
  30. --------------------
  31. MY NETWORK DNS: 192.168.100.4
  32.  
  33. PROBLEM:
  34. --------------------
  35. Instances on COMPUTER #2 cant access anything on internet or out of 10.0.0.x network.
  36.  
  37. TCP DUMP:
  38. --------------------
  39. - Instance #1 (on COMPUTER #2) send ping request to COMPUTER #2
  40. - The request was routed to COMPUTER #1 nova-controller/network
  41. - Controller masked the request and sends to COMPUTER #2 correctly
  42. - COMPUTER #2 replied to COMPUTER #1 correctly
  43. - COMPUTER #1 didn't route it again to Instance #1, just drop it.
Advertisement
Add Comment
Please, Sign In to add comment