You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Ron Bramlett <Ro...@ascensus.com.INVALID> on 2023/05/08 14:13:54 UTC
RE: [EXTERNAL] Re: SSVM agent state greyed out in web UI
Hello Wei. Thank you for your suggestion. I moved the second KVM nic to a different subnet and reprovisioned the Zone with new public and guest IPs. However, the system VMs still cannot access the network.
Is there any sysctl settings that could be blocking this? The KVM installation guide and CloudStack guide don’t mention any changes to sysctl settings.
root@s-6-VM:~# /usr/local/cloud/systemvm/ssvm-check.sh
================================================
First DNS server is 172.18.5.71
PING 172.18.5.71 (172.18.5.71): 56 data bytes
--- 172.18.5.71 ping statistics ---
2 packets transmitted, 0 packets received, 100% packet loss
WARNING: cannot ping DNS server
route follows
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 172.18.8.1 0.0.0.0 UG 0 0 0 eth2
10.120.120.0 0.0.0.0 255.255.252.0 U 0 0 0 eth1
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
172.18.5.71 10.120.120.1 255.255.255.255 UGH 0 0 0 eth1
172.18.8.0 0.0.0.0 255.255.252.0 U 0 0 0 eth2
================================================
ERROR: DNS not resolving cloudstack.apache.org
resolv.conf follows
nameserver 172.18.5.71
nameserver 172.18.5.71
nameserver 172.18.5.72
root@s-6-VM:~#
root@s-6-VM:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 0e:00:a9:fe:9f:a2 brd ff:ff:ff:ff:ff:ff
altname enp0s3
altname ens3
inet 169.254.159.162/16 brd 169.254.255.255 scope global eth0
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 1e:00:b8:00:00:05 brd ff:ff:ff:ff:ff:ff
altname enp0s4
altname ens4
inet 10.120.123.163/22 brd 10.120.123.255 scope global eth1
valid_lft forever preferred_lft forever
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 1e:00:39:00:00:07 brd ff:ff:ff:ff:ff:ff
altname enp0s5
altname ens5
inet 172.18.10.221/22 brd 172.18.11.255 scope global eth2
valid_lft forever preferred_lft forever
root@s-6-VM:~#
From: Wei ZHOU <us...@gmail.com>
Sent: Tuesday, May 2, 2023 1:29 PM
To: users@cloudstack.apache.org
Subject: [EXTERNAL] Re: SSVM agent state greyed out in web UI
CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.
Hi,
In ssvm, the eth1 has ip
10.120.123.166/22<http://10.120.123.166/22>, eth2 has ip 10.120.123.160/22<http://10.120.123.160/22>
They are in same subnet, but.. it seems eth1 is on cloudbr0 and eth2 is on
cloudbr1.
I think they should use ips in different subnet, or on same bridge (network
traffic label)
-Wei
Disclaimer
The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.
This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast Ltd, an innovator in Software as a Service (SaaS) for business. Providing a safer and more useful place for your human generated data. Specializing in; Security, archiving and compliance. To find out more visit the Mimecast website.
RE: [EXTERNAL] Re: SSVM agent state greyed out in web UI
Posted by Ron Bramlett <Ro...@ascensus.com.INVALID>.
Here is the network config from my kvm host. Thanks.
/etc/sysconfig/network-scripts/ifcfg-ens192:
NAME=ens192
DEVICE=ens192
HWADDR=xx:xx:xx:xx:xx:xx
ONBOOT=yes
HOTPLUG=no
BOOTPROTO=none
TYPE=Ethernet
BRIDGE=cloudbr0
/etc/sysconfig/network-scripts/ifcfg-cloudbr0
NAME=cloudbr0
DEVICE=cloudbr0
ONBOOT=yes
BOOTPROTO=none
IPV6INIT=no
IPV6_AUTOCONF=no
TYPE=Bridge
DELAY="5"
STP="yes"
GATEWAY=10.120.120.1
DNS1=172.18.5.71
DNS2=172.18.5.72
DOMAIN=”example.com"
NETMASK=255.255.252.0
IPADDR=10.120.120.31
/etc/sysconfig/network-scripts/ifcfg-ens224:
DEVICE=ens224
HWADDR=zz:zz:zz:zz:zz:zz
ONBOOT=yes
HOTPLUG=no
BOOTPROTO=none
TYPE=Ethernet
BRIDGE=cloudbr1
/etc/sysconfig/network-scripts/ifcfg-cloudbr1
DEVICE=cloudbr1
NAME=cloudbr1
TYPE=Bridge
ONBOOT=yes
BOOTPROTO=none
IPV6INIT=no
IPV6_AUTOCONF=no
DELAY=5
STP=yes
From: Wei ZHOU <us...@gmail.com>
Sent: Tuesday, May 9, 2023 3:04 PM
To: users@cloudstack.apache.org
Subject: [EXTERNAL] Re: SSVM agent state greyed out in web UI
CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe.
Hi Rob,
Can you share the network config of your kvm host ?
-Wei
Disclaimer
The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.
This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast Ltd, an innovator in Software as a Service (SaaS) for business. Providing a safer and more useful place for your human generated data. Specializing in; Security, archiving and compliance. To find out more visit the Mimecast website.
Re: SSVM agent state greyed out in web UI
Posted by Wei ZHOU <us...@gmail.com>.
Hi Rob,
Can you share the network config of your kvm host ?
-Wei
On Monday, 8 May 2023, Ron Bramlett <Ro...@ascensus.com.invalid>
wrote:
> Hello Wei. Thank you for your suggestion. I moved the second KVM nic to a
> different subnet and reprovisioned the Zone with new public and guest IPs.
> However, the system VMs still cannot access the network.
>
> Is there any sysctl settings that could be blocking this? The KVM
> installation guide and CloudStack guide don’t mention any changes to sysctl
> settings.
>
> root@s-6-VM:~# /usr/local/cloud/systemvm/ssvm-check.sh
> ================================================
> First DNS server is 172.18.5.71
> PING 172.18.5.71 (172.18.5.71): 56 data bytes
> --- 172.18.5.71 ping statistics ---
> 2 packets transmitted, 0 packets received, 100% packet loss
> WARNING: cannot ping DNS server
> route follows
> Kernel IP routing table
> Destination Gateway Genmask Flags Metric Ref Use
> Iface
> 0.0.0.0 172.18.8.1 0.0.0.0 UG 0 0 0
> eth2
> 10.120.120.0 0.0.0.0 255.255.252.0 U 0 0 0
> eth1
> 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0
> eth0
> 172.18.5.71 10.120.120.1 255.255.255.255 UGH 0 0 0
> eth1
> 172.18.8.0 0.0.0.0 255.255.252.0 U 0 0 0
> eth2
> ================================================
> ERROR: DNS not resolving cloudstack.apache.org
> resolv.conf follows
> nameserver 172.18.5.71
> nameserver 172.18.5.71
> nameserver 172.18.5.72
> root@s-6-VM:~#
> root@s-6-VM:~# ip addr
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group
> default qlen 1000
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> inet 127.0.0.1/8 scope host lo
> valid_lft forever preferred_lft forever
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP group default qlen 1000
> link/ether 0e:00:a9:fe:9f:a2 brd ff:ff:ff:ff:ff:ff
> altname enp0s3
> altname ens3
> inet 169.254.159.162/16 brd 169.254.255.255 scope global eth0
> valid_lft forever preferred_lft forever
> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP group default qlen 1000
> link/ether 1e:00:b8:00:00:05 brd ff:ff:ff:ff:ff:ff
> altname enp0s4
> altname ens4
> inet 10.120.123.163/22 brd 10.120.123.255 scope global eth1
> valid_lft forever preferred_lft forever
> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP group default qlen 1000
> link/ether 1e:00:39:00:00:07 brd ff:ff:ff:ff:ff:ff
> altname enp0s5
> altname ens5
> inet 172.18.10.221/22 brd 172.18.11.255 scope global eth2
> valid_lft forever preferred_lft forever
> root@s-6-VM:~#
>
> From: Wei ZHOU <us...@gmail.com>
> Sent: Tuesday, May 2, 2023 1:29 PM
> To: users@cloudstack.apache.org
> Subject: [EXTERNAL] Re: SSVM agent state greyed out in web UI
>
> CAUTION: This email originated from outside of the organization. Do not
> follow guidance, click links, or open attachments unless you recognize the
> sender and know the content is safe.
>
> Hi,
>
> In ssvm, the eth1 has ip
> 10.120.123.166/22<http://10.120.123.166/22>, eth2 has ip 10.120.123.160/22
> <http://10.120.123.160/22>
> They are in same subnet, but.. it seems eth1 is on cloudbr0 and eth2 is on
> cloudbr1.
>
> I think they should use ips in different subnet, or on same bridge (network
> traffic label)
>
> -Wei
>
> Disclaimer
>
> The information contained in this communication from the sender is
> confidential. It is intended solely for use by the recipient and others
> authorized to receive it. If you are not the recipient, you are hereby
> notified that any disclosure, copying, distribution or taking action in
> relation of the contents of this information is strictly prohibited and may
> be unlawful.
>
> This email has been scanned for viruses and malware, and may have been
> automatically archived by Mimecast Ltd, an innovator in Software as a
> Service (SaaS) for business. Providing a safer and more useful place for
> your human generated data. Specializing in; Security, archiving and
> compliance. To find out more visit the Mimecast website.
>