s_schultchen

cntr1a_pst_net.txt

Dec 16th, 2016
138
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.76 KB | None | 0 0
  1. ############ ip a
  2. 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
  3. link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  4. inet 127.0.0.1/8 scope host lo
  5. valid_lft forever preferred_lft forever
  6. inet6 ::1/128 scope host
  7. valid_lft forever preferred_lft forever
  8. 2: enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc pfifo_fast state UP qlen 1000
  9. link/ether d0:50:99:91:30:ee brd ff:ff:ff:ff:ff:ff
  10. inet 10.0.0.103/24 brd 10.0.0.255 scope global dynamic enp3s0
  11. valid_lft 33962sec preferred_lft 33962sec
  12. inet 10.0.0.18/24 brd 10.0.0.255 scope global secondary enp3s0
  13. valid_lft forever preferred_lft forever
  14. inet 10.0.0.11/24 brd 10.0.0.255 scope global secondary enp3s0
  15. valid_lft forever preferred_lft forever
  16. inet 10.0.0.12/24 brd 10.0.0.255 scope global secondary enp3s0
  17. valid_lft forever preferred_lft forever
  18. inet6 fe80::d250:99ff:fe91:30ee/64 scope link
  19. valid_lft forever preferred_lft forever
  20. 3: enp3s0.5@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
  21. link/ether d0:50:99:91:30:ee brd ff:ff:ff:ff:ff:ff
  22. inet6 fe80::d250:99ff:fe91:30ee/64 scope link
  23. valid_lft forever preferred_lft forever
  24. 4: enp3s0.4@enp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
  25. link/ether d0:50:99:91:30:ee brd ff:ff:ff:ff:ff:ff
  26. inet6 fe80::d250:99ff:fe91:30ee/64 scope link
  27. valid_lft forever preferred_lft forever
  28. 5: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  29. link/ether 1e:ff:a5:3e:88:c5 brd ff:ff:ff:ff:ff:ff
  30. 6: br-int: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  31. link/ether 5a:ef:ef:aa:fe:43 brd ff:ff:ff:ff:ff:ff
  32. 7: br-tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  33. link/ether 0e:e0:92:26:01:47 brd ff:ff:ff:ff:ff:ff
  34. 8: br-provider: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
  35. link/ether ce:ec:97:94:8e:4f brd ff:ff:ff:ff:ff:ff
  36.  
  37.  
  38. ############ ip r
  39. default via 10.0.0.1 dev enp3s0 proto static metric 100
  40. 10.0.0.0/24 dev enp3s0 proto kernel scope link src 10.0.0.103 metric 100
  41.  
  42.  
  43. ############ ip netns
  44. ############ ip netns exec NAMESPACE ip a
  45. ############ ip netns exec NAMESPACE ip r
  46. ############ iptables-save
  47. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:34 2016
  48. *filter
  49. :INPUT ACCEPT [2942290:1036690952]
  50. :FORWARD ACCEPT [0:0]
  51. :OUTPUT ACCEPT [2995136:1138414003]
  52. :neutron-filter-top - [0:0]
  53. :neutron-openvswi-FORWARD - [0:0]
  54. :neutron-openvswi-INPUT - [0:0]
  55. :neutron-openvswi-OUTPUT - [0:0]
  56. :neutron-openvswi-local - [0:0]
  57. :neutron-openvswi-sg-chain - [0:0]
  58. :neutron-openvswi-sg-fallback - [0:0]
  59. :nova-api-FORWARD - [0:0]
  60. :nova-api-INPUT - [0:0]
  61. :nova-api-OUTPUT - [0:0]
  62. :nova-api-local - [0:0]
  63. :nova-filter-top - [0:0]
  64. -A INPUT -j neutron-openvswi-INPUT
  65. -A INPUT -j nova-api-INPUT
  66. -A FORWARD -j neutron-filter-top
  67. -A FORWARD -j neutron-openvswi-FORWARD
  68. -A FORWARD -j nova-filter-top
  69. -A FORWARD -j nova-api-FORWARD
  70. -A OUTPUT -j neutron-filter-top
  71. -A OUTPUT -j neutron-openvswi-OUTPUT
  72. -A OUTPUT -j nova-filter-top
  73. -A OUTPUT -j nova-api-OUTPUT
  74. -A neutron-filter-top -j neutron-openvswi-local
  75. -A neutron-openvswi-sg-chain -j ACCEPT
  76. -A neutron-openvswi-sg-fallback -m comment --comment "Default drop rule for unmatched traffic." -j DROP
  77. -A nova-api-INPUT -d 10.0.0.103/32 -p tcp -m tcp --dport 8775 -j ACCEPT
  78. -A nova-filter-top -j nova-api-local
  79. COMMIT
  80. # Completed on Fri Dec 16 20:19:34 2016
  81. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:34 2016
  82. *mangle
  83. :PREROUTING ACCEPT [2952002:1037182505]
  84. :INPUT ACCEPT [2952002:1037182505]
  85. :FORWARD ACCEPT [0:0]
  86. :OUTPUT ACCEPT [2995131:1138413559]
  87. :POSTROUTING ACCEPT [2995131:1138413559]
  88. :neutron-openvswi-FORWARD - [0:0]
  89. :neutron-openvswi-INPUT - [0:0]
  90. :neutron-openvswi-OUTPUT - [0:0]
  91. :neutron-openvswi-POSTROUTING - [0:0]
  92. :neutron-openvswi-PREROUTING - [0:0]
  93. :neutron-openvswi-mark - [0:0]
  94. :nova-api-POSTROUTING - [0:0]
  95. -A PREROUTING -j neutron-openvswi-PREROUTING
  96. -A INPUT -j neutron-openvswi-INPUT
  97. -A FORWARD -j neutron-openvswi-FORWARD
  98. -A OUTPUT -j neutron-openvswi-OUTPUT
  99. -A POSTROUTING -j neutron-openvswi-POSTROUTING
  100. -A POSTROUTING -j nova-api-POSTROUTING
  101. -A neutron-openvswi-PREROUTING -j neutron-openvswi-mark
  102. COMMIT
  103. # Completed on Fri Dec 16 20:19:34 2016
  104. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:34 2016
  105. *nat
  106. :PREROUTING ACCEPT [2560:183858]
  107. :INPUT ACCEPT [2560:183858]
  108. :OUTPUT ACCEPT [113383:6848570]
  109. :POSTROUTING ACCEPT [113383:6848570]
  110. :neutron-openvswi-OUTPUT - [0:0]
  111. :neutron-openvswi-POSTROUTING - [0:0]
  112. :neutron-openvswi-PREROUTING - [0:0]
  113. :neutron-openvswi-float-snat - [0:0]
  114. :neutron-openvswi-snat - [0:0]
  115. :neutron-postrouting-bottom - [0:0]
  116. :nova-api-OUTPUT - [0:0]
  117. :nova-api-POSTROUTING - [0:0]
  118. :nova-api-PREROUTING - [0:0]
  119. :nova-api-float-snat - [0:0]
  120. :nova-api-snat - [0:0]
  121. :nova-postrouting-bottom - [0:0]
  122. -A PREROUTING -j neutron-openvswi-PREROUTING
  123. -A PREROUTING -j nova-api-PREROUTING
  124. -A OUTPUT -j neutron-openvswi-OUTPUT
  125. -A OUTPUT -j nova-api-OUTPUT
  126. -A POSTROUTING -j neutron-openvswi-POSTROUTING
  127. -A POSTROUTING -j neutron-postrouting-bottom
  128. -A POSTROUTING -j nova-api-POSTROUTING
  129. -A POSTROUTING -j nova-postrouting-bottom
  130. -A neutron-openvswi-snat -j neutron-openvswi-float-snat
  131. -A neutron-postrouting-bottom -m comment --comment "Perform source NAT on outgoing traffic." -j neutron-openvswi-snat
  132. -A nova-api-snat -j nova-api-float-snat
  133. -A nova-postrouting-bottom -j nova-api-snat
  134. COMMIT
  135. # Completed on Fri Dec 16 20:19:34 2016
  136. # Generated by iptables-save v1.4.21 on Fri Dec 16 20:19:34 2016
  137. *raw
  138. :PREROUTING ACCEPT [2952002:1037182505]
  139. :OUTPUT ACCEPT [2995131:1138413559]
  140. :neutron-openvswi-OUTPUT - [0:0]
  141. :neutron-openvswi-PREROUTING - [0:0]
  142. -A PREROUTING -j neutron-openvswi-PREROUTING
  143. -A OUTPUT -j neutron-openvswi-OUTPUT
  144. COMMIT
  145. # Completed on Fri Dec 16 20:19:34 2016
Advertisement
Add Comment
Please, Sign In to add comment