Network issues when adding a new external network in OpenStack with Open vSwitchOpenstack nodes with external...

Unreliable Magic - Is it worth it?

Pole-zeros of a real-valued causal FIR system

Roman Numeral Treatment of Suspensions

Was Spock the First Vulcan in Starfleet?

Different result between scanning in Epson's "color negative film" mode and scanning in positive -> invert curve in post?

How to safely derail a train during transit?

How do scammers retract money, while you can’t?

How did Arya survive the stabbing?

Short story about space worker geeks who zone out by 'listening' to radiation from stars

Is there a good way to store credentials outside of a password manager?

Do sorcerers' Subtle Spells require a skill check to be unseen?

System.debug(JSON.Serialize(o)) Not longer shows full string

India just shot down a satellite from the ground. At what altitude range is the resulting debris field?

Term for the "extreme-extension" version of a straw man fallacy?

Failed to fetch jessie backports repository

How do I rename a Linux host without needing to reboot for the rename to take effect?

How to check is there any negative term in a large list?

How does the UK government determine the size of a mandate?

Crossing the line between justified force and brutality

Sequence of Tenses: Translating the subjunctive

How do I go from 300 unfinished/half written blog posts, to published posts?

Is the destination of a commercial flight important for the pilot?

Customer Requests (Sometimes) Drive Me Bonkers!

Sort a list by elements of another list



Network issues when adding a new external network in OpenStack with Open vSwitch


Openstack nodes with external network onlyCentos multiple NICs routing issueKVM Network configuration + VLAN trunckopenstack instances cannot access external networkqemu, kvm: Guest: No DHCPOFFERS receivedConnecting a private IP and a Public IP through one server on dual NICConnect Open vSwitch to interface in a VM OpenStackWin2012R2 NIC Teaming with LACP, but one nic has not trafficconnect a docker container to a local networkHow to Access Openstack on my local mechine from External network?













0















I want to add new external network. But when I added new bridge to config openvswitch_agent.ini and restart l3-agent and openvswitch-agent one of the networks stops working. This network in openvswitch uses the same bond as the new network.



New bridge:



Bridge "br-ex2"
Controller "tcp:127.0.0.1:6633"
fail_mode: secure
Port "bond1.83"
Interface "bond1.83"
Port "phy-br-ex2"
Interface "phy-br-ex2"
type: patch
options: {peer="int-br-ex2"}
Port "br-ex2"
Interface "br-ex2"
type: internal


Old bridge:



Bridge br-ex
Controller "tcp:127.0.0.1:6633"
fail_mode: secure
Port br-ex
Interface br-ex
type: internal
Port phy-br-ex
Interface phy-br-ex
type: patch
options: {peer=int-br-ex}
Port "bond1.550"
Interface "bond1.550"


bond1:



NAME=bond1
BONDING_MASTER=yes
MTU=9000
BOOTPROTO=none
BONDING_OPTS="miimon=100 mode=active-backup"
DEVICE=bond1
TYPE=Bond
ONBOOT=yes
NM_CONTROLLED=no


bond1.550:



DEVICE=bond1.550
NAME=bond1.550
BOOTPROTO=none
ONPARENT=yes
VLAN=yes
NM_CONTROLLED=no


bond1.83:



DEVICE=bond1.83
NAME=bond1.83
BOOTPROTO=none
ONPARENT=yes
VLAN=yes
NM_CONTROLLED=no


openvswitch_agent.ini:



[agent]
tunnel_types = gre,vxlan
l2_population = True

[ovs]
bridge_mappings = external:br-ex,dmz:br-dmz,external2:br-ex2
local_ip = 10.10.21.3

[securitygroup]
firewall_driver = iptables_hybrid


l3_agent.ini:



[DEFAULT]
interface_driver = openvswitch
external_network_bridge =


ml2_conf.ini on controllers:



[ml2]
type_drivers = flat,vlan,gre,vxlan
tenant_network_types = gre,vxlan
mechanism_drivers = openvswitch,l2population
extension_drivers = port_security

[ml2_type_flat]
flat_networks = external,external2,dmz

[ml2_type_gre]
tunnel_id_ranges = 1:1000

[ml2_type_vlan]
network_vlan_ranges = vlan:1000:2999

[ml2_type_vxlan]
vni_ranges = 1001:2999

[securitygroup]
enable_ipset = true


Afther adding extenral2 in openvswitch_agent.ini, "external" not work, but DMZ network works fine. If I delete external2:br-ex2 from openvswitch_agent.ini, "external" start work.



I can't add new network cards to the server and I can't disband bond, we need fault tolerance at the interface level. Maybe I missed something in l3-agent configurations or something else?









share



























    0















    I want to add new external network. But when I added new bridge to config openvswitch_agent.ini and restart l3-agent and openvswitch-agent one of the networks stops working. This network in openvswitch uses the same bond as the new network.



    New bridge:



    Bridge "br-ex2"
    Controller "tcp:127.0.0.1:6633"
    fail_mode: secure
    Port "bond1.83"
    Interface "bond1.83"
    Port "phy-br-ex2"
    Interface "phy-br-ex2"
    type: patch
    options: {peer="int-br-ex2"}
    Port "br-ex2"
    Interface "br-ex2"
    type: internal


    Old bridge:



    Bridge br-ex
    Controller "tcp:127.0.0.1:6633"
    fail_mode: secure
    Port br-ex
    Interface br-ex
    type: internal
    Port phy-br-ex
    Interface phy-br-ex
    type: patch
    options: {peer=int-br-ex}
    Port "bond1.550"
    Interface "bond1.550"


    bond1:



    NAME=bond1
    BONDING_MASTER=yes
    MTU=9000
    BOOTPROTO=none
    BONDING_OPTS="miimon=100 mode=active-backup"
    DEVICE=bond1
    TYPE=Bond
    ONBOOT=yes
    NM_CONTROLLED=no


    bond1.550:



    DEVICE=bond1.550
    NAME=bond1.550
    BOOTPROTO=none
    ONPARENT=yes
    VLAN=yes
    NM_CONTROLLED=no


    bond1.83:



    DEVICE=bond1.83
    NAME=bond1.83
    BOOTPROTO=none
    ONPARENT=yes
    VLAN=yes
    NM_CONTROLLED=no


    openvswitch_agent.ini:



    [agent]
    tunnel_types = gre,vxlan
    l2_population = True

    [ovs]
    bridge_mappings = external:br-ex,dmz:br-dmz,external2:br-ex2
    local_ip = 10.10.21.3

    [securitygroup]
    firewall_driver = iptables_hybrid


    l3_agent.ini:



    [DEFAULT]
    interface_driver = openvswitch
    external_network_bridge =


    ml2_conf.ini on controllers:



    [ml2]
    type_drivers = flat,vlan,gre,vxlan
    tenant_network_types = gre,vxlan
    mechanism_drivers = openvswitch,l2population
    extension_drivers = port_security

    [ml2_type_flat]
    flat_networks = external,external2,dmz

    [ml2_type_gre]
    tunnel_id_ranges = 1:1000

    [ml2_type_vlan]
    network_vlan_ranges = vlan:1000:2999

    [ml2_type_vxlan]
    vni_ranges = 1001:2999

    [securitygroup]
    enable_ipset = true


    Afther adding extenral2 in openvswitch_agent.ini, "external" not work, but DMZ network works fine. If I delete external2:br-ex2 from openvswitch_agent.ini, "external" start work.



    I can't add new network cards to the server and I can't disband bond, we need fault tolerance at the interface level. Maybe I missed something in l3-agent configurations or something else?









    share

























      0












      0








      0








      I want to add new external network. But when I added new bridge to config openvswitch_agent.ini and restart l3-agent and openvswitch-agent one of the networks stops working. This network in openvswitch uses the same bond as the new network.



      New bridge:



      Bridge "br-ex2"
      Controller "tcp:127.0.0.1:6633"
      fail_mode: secure
      Port "bond1.83"
      Interface "bond1.83"
      Port "phy-br-ex2"
      Interface "phy-br-ex2"
      type: patch
      options: {peer="int-br-ex2"}
      Port "br-ex2"
      Interface "br-ex2"
      type: internal


      Old bridge:



      Bridge br-ex
      Controller "tcp:127.0.0.1:6633"
      fail_mode: secure
      Port br-ex
      Interface br-ex
      type: internal
      Port phy-br-ex
      Interface phy-br-ex
      type: patch
      options: {peer=int-br-ex}
      Port "bond1.550"
      Interface "bond1.550"


      bond1:



      NAME=bond1
      BONDING_MASTER=yes
      MTU=9000
      BOOTPROTO=none
      BONDING_OPTS="miimon=100 mode=active-backup"
      DEVICE=bond1
      TYPE=Bond
      ONBOOT=yes
      NM_CONTROLLED=no


      bond1.550:



      DEVICE=bond1.550
      NAME=bond1.550
      BOOTPROTO=none
      ONPARENT=yes
      VLAN=yes
      NM_CONTROLLED=no


      bond1.83:



      DEVICE=bond1.83
      NAME=bond1.83
      BOOTPROTO=none
      ONPARENT=yes
      VLAN=yes
      NM_CONTROLLED=no


      openvswitch_agent.ini:



      [agent]
      tunnel_types = gre,vxlan
      l2_population = True

      [ovs]
      bridge_mappings = external:br-ex,dmz:br-dmz,external2:br-ex2
      local_ip = 10.10.21.3

      [securitygroup]
      firewall_driver = iptables_hybrid


      l3_agent.ini:



      [DEFAULT]
      interface_driver = openvswitch
      external_network_bridge =


      ml2_conf.ini on controllers:



      [ml2]
      type_drivers = flat,vlan,gre,vxlan
      tenant_network_types = gre,vxlan
      mechanism_drivers = openvswitch,l2population
      extension_drivers = port_security

      [ml2_type_flat]
      flat_networks = external,external2,dmz

      [ml2_type_gre]
      tunnel_id_ranges = 1:1000

      [ml2_type_vlan]
      network_vlan_ranges = vlan:1000:2999

      [ml2_type_vxlan]
      vni_ranges = 1001:2999

      [securitygroup]
      enable_ipset = true


      Afther adding extenral2 in openvswitch_agent.ini, "external" not work, but DMZ network works fine. If I delete external2:br-ex2 from openvswitch_agent.ini, "external" start work.



      I can't add new network cards to the server and I can't disband bond, we need fault tolerance at the interface level. Maybe I missed something in l3-agent configurations or something else?









      share














      I want to add new external network. But when I added new bridge to config openvswitch_agent.ini and restart l3-agent and openvswitch-agent one of the networks stops working. This network in openvswitch uses the same bond as the new network.



      New bridge:



      Bridge "br-ex2"
      Controller "tcp:127.0.0.1:6633"
      fail_mode: secure
      Port "bond1.83"
      Interface "bond1.83"
      Port "phy-br-ex2"
      Interface "phy-br-ex2"
      type: patch
      options: {peer="int-br-ex2"}
      Port "br-ex2"
      Interface "br-ex2"
      type: internal


      Old bridge:



      Bridge br-ex
      Controller "tcp:127.0.0.1:6633"
      fail_mode: secure
      Port br-ex
      Interface br-ex
      type: internal
      Port phy-br-ex
      Interface phy-br-ex
      type: patch
      options: {peer=int-br-ex}
      Port "bond1.550"
      Interface "bond1.550"


      bond1:



      NAME=bond1
      BONDING_MASTER=yes
      MTU=9000
      BOOTPROTO=none
      BONDING_OPTS="miimon=100 mode=active-backup"
      DEVICE=bond1
      TYPE=Bond
      ONBOOT=yes
      NM_CONTROLLED=no


      bond1.550:



      DEVICE=bond1.550
      NAME=bond1.550
      BOOTPROTO=none
      ONPARENT=yes
      VLAN=yes
      NM_CONTROLLED=no


      bond1.83:



      DEVICE=bond1.83
      NAME=bond1.83
      BOOTPROTO=none
      ONPARENT=yes
      VLAN=yes
      NM_CONTROLLED=no


      openvswitch_agent.ini:



      [agent]
      tunnel_types = gre,vxlan
      l2_population = True

      [ovs]
      bridge_mappings = external:br-ex,dmz:br-dmz,external2:br-ex2
      local_ip = 10.10.21.3

      [securitygroup]
      firewall_driver = iptables_hybrid


      l3_agent.ini:



      [DEFAULT]
      interface_driver = openvswitch
      external_network_bridge =


      ml2_conf.ini on controllers:



      [ml2]
      type_drivers = flat,vlan,gre,vxlan
      tenant_network_types = gre,vxlan
      mechanism_drivers = openvswitch,l2population
      extension_drivers = port_security

      [ml2_type_flat]
      flat_networks = external,external2,dmz

      [ml2_type_gre]
      tunnel_id_ranges = 1:1000

      [ml2_type_vlan]
      network_vlan_ranges = vlan:1000:2999

      [ml2_type_vxlan]
      vni_ranges = 1001:2999

      [securitygroup]
      enable_ipset = true


      Afther adding extenral2 in openvswitch_agent.ini, "external" not work, but DMZ network works fine. If I delete external2:br-ex2 from openvswitch_agent.ini, "external" start work.



      I can't add new network cards to the server and I can't disband bond, we need fault tolerance at the interface level. Maybe I missed something in l3-agent configurations or something else?







      networking openstack openvswitch openstack-neutron





      share












      share










      share



      share










      asked 4 mins ago









      amkgiamkgi

      5115




      5115






















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "2"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f960370%2fnetwork-issues-when-adding-a-new-external-network-in-openstack-with-open-vswitch%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Server Fault!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f960370%2fnetwork-issues-when-adding-a-new-external-network-in-openstack-with-open-vswitch%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

          Список ссавців Італії Природоохоронні статуси | Список |...

          Українські прізвища Зміст Історичні відомості |...