You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Tejas Gadaria <re...@gmail.com> on 2014/06/04 09:39:53 UTC

SSVM & CPVM Public IP not pinging

Hi,

I am trying to create setup with xenserver, where Storage,public,Guest &
Management traffic will be carried by 4 diff. nics & all are in different
VLAN.
After assigning the name-label in xen. System vm's are created but I am not
able ping to SSVM & CPVM public IP .

root@s-1-VM:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
default         10.129.152.1    0.0.0.0         UG    0      0        0 eth2
google-public-d 10.129.151.1    255.255.255.255 UGH   0      0        0 eth1
10.129.151.0    *               255.255.255.0   U     0      0        0 eth1
10.129.152.0    *               255.255.255.0   U     0      0        0 eth2
10.129.155.0    *               255.255.255.0   U     0      0        0 eth3
link-local      *               255.255.0.0     U     0      0        0 eth0

root@s-1-VM:~# ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 48 data bytes
56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=64.948 ms
^C--- 8.8.8.8 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max/stddev = 64.948/64.948/64.948/0.000 ms

I am not able to ping to Storage from SSVM either.

Following below link right now.
https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting

Need help on this.

Regards,
Tejas

Re: SSVM & CPVM Public IP not pinging

Posted by ilya musayev <il...@gmail.com>.
In VMware world, which i assume is not much different from XEN, this 
usually means that the network system VM NIC inherited is incorrect

Here is what i wold do, while you are connected to a VM through console, 
initiate a ping to a gateway (continuous mode), change the sysvms 
network one by one, to see which one works.  Most likely, you have 
public and private in reverse. I assume they are untagged, if they are 
check what portgroups you have in XEN created.


On 6/4/14, 12:39 AM, Tejas Gadaria wrote:
> Hi,
>
> I am trying to create setup with xenserver, where Storage,public,Guest &
> Management traffic will be carried by 4 diff. nics & all are in different
> VLAN.
> After assigning the name-label in xen. System vm's are created but I am not
> able ping to SSVM & CPVM public IP .
>
> root@s-1-VM:~# route
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> default         10.129.152.1    0.0.0.0         UG    0      0        0 eth2
> google-public-d 10.129.151.1    255.255.255.255 UGH   0      0        0 eth1
> 10.129.151.0    *               255.255.255.0   U     0      0        0 eth1
> 10.129.152.0    *               255.255.255.0   U     0      0        0 eth2
> 10.129.155.0    *               255.255.255.0   U     0      0        0 eth3
> link-local      *               255.255.0.0     U     0      0        0 eth0
>
> root@s-1-VM:~# ping 8.8.8.8
> PING 8.8.8.8 (8.8.8.8): 48 data bytes
> 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=64.948 ms
> ^C--- 8.8.8.8 ping statistics ---
> 1 packets transmitted, 1 packets received, 0% packet loss
> round-trip min/avg/max/stddev = 64.948/64.948/64.948/0.000 ms
>
> I am not able to ping to Storage from SSVM either.
>
> Following below link right now.
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting
>
> Need help on this.
>
> Regards,
> Tejas
>


Re: SSVM & CPVM Public IP not pinging

Posted by Tejas Gadaria <re...@gmail.com>.
Hi Shanker

Thanks for helping out.

Regards,
Tejas


On Thu, Jun 5, 2014 at 6:09 PM, Shanker Balan <sh...@shapeblue.com>
wrote:

> Hi Tejas,
>
>
> On 05-Jun-2014, at 5:04 pm, Tejas Gadaria <re...@gmail.com> wrote:
>
> > Hi Shanker,
> >
> > Aww.. VLAN ID information for Public network provided to me was
> > incorrected.
>
> Sounds very familiar. While you are at it, make sure the guest VLANs
> are also configured correctly across the switch ports.
>
> I just put some screenshots together for the next time someone
> has SSVM issues with XenServer.
>
>
> http://shankerbalan.net/blog/cloudstack-ssvm-network-topology-with-xenserver/
>
> > Just for Information..
> >
> > I have xen setup to isolate primary storage traffic, where Cloudstack MS
> &
> > Secondary storage is on same NIC & primary storage is on separate NIC,
> > secondary storage traffic is moving from management NIC.
>
> Cool. If you have the luxury, you could also bond NICs to increase
> the bandwidth.
>
>
> > For testing purpose I am planning to implement swift as secondary sorage,
> > So is there any way i can isolate secondary storage traffic from
> management
> > NIC.
> >
>
> The Storage network is actually meant for secondary storage. If you want to
> route primary storage traffic also over the storage network, make sure that
> the primary storage device is also on the same subnet as the secondary
> storage.
>
> Linux networking will take care of pushing both pri/sec storage traffic
> over the right interface.
>
>
> > Regards,
> > Tejas
> >
> >
> > Regards,
> > Tejas
> >
> >
> >
> > On Thu, Jun 5, 2014 at 3:48 PM, Shanker Balan <
> shanker.balan@shapeblue.com>
> > wrote:
> >
> >> Comments inline.
> >>
> >> On 05-Jun-2014, at 3:02 pm, Tejas Gadaria <re...@gmail.com>
> wrote:
> >>
> >>> Hi Shanker,
> >>>
> >>> 1) Also I am not able to ping to gateway.
> >>
> >>
> >> Not good.
> >>
> >>> 2) Here is the ssvm-check output..
> >>>
> >>> root@s-1-VM:/usr/local/cloud/systemvm# sh ssvm-check.sh
> >>> ================================================
> >>> First DNS server is  8.8.8.8
> >>> PING 8.8.8.8 (8.8.8.8): 48 data bytes
> >>> 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=62.104 ms
> >>> 56 bytes from 8.8.8.8: icmp_seq=1 ttl=46 time=62.306 ms
> >>> --- 8.8.8.8 ping statistics ---
> >>> 2 packets transmitted, 2 packets received, 0% packet loss
> >>> round-trip min/avg/max/stddev = 62.104/62.205/62.306/0.101 ms
> >>> Good: Can ping DNS server
> >>> ================================================
> >>> Good: DNS resolves download.cloud.com
> >>> ================================================
> >>> nfs is currently mounted
> >>> Mount point is /mnt/SecStorage/fde1faee-5559-3165-82a8-0078c7b99c08
> >>> Good: Can write to mount point
> >>> ================================================
> >>> Management server is 10.129.151.55. Checking connectivity.
> >>> Good: Can connect to management server port 8250
> >>> ================================================
> >>> Good: Java process is running
> >>> ================================================
> >>> Tests Complete. Look for ERROR or WARNING above.
> >>>
> >>>
> >>> But in ssvm /var/log/cloud/cloud.out i found below logs.
> >>>
> >>> 06:41:01,502  INFO NioClient:81 - Connected to 10.129.151.55:8250
> >>> 06:41:01,681  INFO Agent:421 - Proccess agent startup answer, agent id
> =
> >> 0
> >>> 06:41:01,681  INFO Agent:267 - Set agent id 0
> >>> 06:41:01,699  INFO Agent:431 - Startup Response Received: agent id = 0
> >>> 06:41:01,741  INFO NfsSecondaryStorageResource:2482 - Determined host
> >>> 10.129.155.101 corresponds to IP 10.129.155.101
> >>> 06:41:01,742  INFO NfsSecondaryStorageResource:2482 - Determined host
> >>> 10.129.155.101 corresponds to IP 10.129.155.101
> >>> 06:41:03,954  INFO NfsSecondaryStorageResource:2482 - Determined host
> >>> 10.129.155.101 corresponds to IP 10.129.155.101
> >>> 06:43:12,830 ERROR NfsSecondaryStorageResource:2396 - Unable to mount
> >>> 10.129.155.101:/vol/secondary at
> >>> /mnt/SecStorage/548477a5-73f6-3dd6-9179-93e4c92a3329 due to mount.nfs:
> >>> Connection timed out
> >>>
> >>
> >>
> >> ssvm-check and logs dont seem to agree on the secondary storage.
> >>
> >>> nfs is currently mounted
> >>> Mount point is /mnt/SecStorage/fde1faee-5559-3165-82a8-0078c7b99c08
> >>> Good: Can write to mount point
> >>
> >> ssvm-check says it can write to the mount point.
> >>
> >>> 06:43:12,830 ERROR NfsSecondaryStorageResource:2396 - Unable to mount
> >>> 10.129.155.101:/vol/secondary at
> >>> /mnt/SecStorage/548477a5-73f6-3dd6-9179-93e4c92a3329 due to mount.nfs:
> >>> Connection timed out
> >>
> >>
> >> And here the log shows timeouts.
> >>
> >>
> >>> Also on public interface & Storage interface,are not trunk.Only
> >> inter-vlan
> >>> routing is enable.
> >>
> >>
> >> Have you checked if the SSVM’s virtual interfaces got bridged to the
> >> physical
> >> interfaces as per your label scheme? Have you run tcpdump to see if the
> >> packets are going over the right interface? Can you snoop on the switch
> >> end to
> >> see if the packets are indeed making it out the interface? Are the
> switches
> >> configured with VLANs correctly?
> >>
> >>
> >>>
> >>>
> >>> Regards,
> >>> Tejas
> >>>
> >>>
> >>>
> >>> On Thu, Jun 5, 2014 at 11:40 AM, Shanker Balan <
> >> shanker.balan@shapeblue.com>
> >>> wrote:
> >>>
> >>>> Hi Tejas,
> >>>>
> >>>> comments inline.
> >>>>
> >>>> On 04-Jun-2014, at 1:09 pm, Tejas Gadaria <re...@gmail.com>
> >> wrote:
> >>>>
> >>>>> Hi,
> >>>>>
> >>>>> I am trying to create setup with xenserver, where
> Storage,public,Guest
> >> &
> >>>>> Management traffic will be carried by 4 diff. nics & all are in
> >> different
> >>>>> VLAN.
> >>>>> After assigning the name-label in xen. System vm's are created but I
> am
> >>>> not
> >>>>> able ping to SSVM & CPVM public IP .
> >>>>>
> >>>>> root@s-1-VM:~# route
> >>>>> Kernel IP routing table
> >>>>> Destination     Gateway         Genmask         Flags Metric Ref
>  Use
> >>>>> Iface
> >>>>> default         10.129.152.1    0.0.0.0         UG    0      0
>  0
> >>>> eth2
> >>>>> google-public-d 10.129.151.1    255.255.255.255 UGH   0      0
>  0
> >>>> eth1
> >>>>> 10.129.151.0    *               255.255.255.0   U     0      0
>  0
> >>>> eth1
> >>>>> 10.129.152.0    *               255.255.255.0   U     0      0
>  0
> >>>> eth2
> >>>>> 10.129.155.0    *               255.255.255.0   U     0      0
>  0
> >>>> eth3
> >>>>> link-local      *               255.255.0.0     U     0      0
>  0
> >>>> eth0
> >>>>>
> >>>>> root@s-1-VM:~# ping 8.8.8.8
> >>>>> PING 8.8.8.8 (8.8.8.8): 48 data bytes
> >>>>> 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=64.948 ms
> >>>>> ^C--- 8.8.8.8 ping statistics ---
> >>>>> 1 packets transmitted, 1 packets received, 0% packet loss
> >>>>> round-trip min/avg/max/stddev = 64.948/64.948/64.948/0.000 ms
> >>>>
> >>>> You are able to reach Google DNS because there is a static
> >>>> route to 8.8.8.8 via the management subnet.
> >>>>
> >>>>
> >>>>> I am not able to ping to Storage from SSVM either.
> >>>>>
> >>>>> Following below link right now.
> >>>>>
> >>>>
> >>
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting
> >>>>
> >>>>
> >>>> Can share the full output of ssvm-check.sh?
> >>>>
> >>>> Can you ping the gateway? If not, it could be that:
> >>>>
> >>>> 1) 10.129.152.0 subnet is not routable or cant reach 10.129.152.1
> >>>> 2) eth2 is bridged to the interfaces labeled for public traffic
> >>>>
> >>>> I would check if each of the virtual interfaces are bridged to the
> right
> >>>> physical interface on the XenServer labeled interfaces.
> >>>>
> >>>> tcpdump on all the interfaces on the SSVM and on the physical
> >>>> interfaces will also help identify the issue.
> >>>>
> >>>> Regards.
> >>>>
> >>>> --
> >>>> @shankerbalan
> >>
> >> --
> >> @shankerbalan
> >>
> >> M: +91 98860 60539 | O: +91 (80) 67935867
> >> shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> >> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade
> Centre,
> >> Bangalore - 560 055
> >>
> >> Find out more about ShapeBlue and our range of CloudStack related
> services
> >>
> >> IaaS Cloud Design & Build<
> >> http://shapeblue.com/iaas-cloud-design-and-build//>
> >> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/
> >
> >> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> >> CloudStack Infrastructure Support<
> >> http://shapeblue.com/cloudstack-infrastructure-support/>
> >> CloudStack Bootcamp Training Courses<
> >> http://shapeblue.com/cloudstack-training/>
> >>
> >> This email and any attachments to it may be confidential and are
> intended
> >> solely for the use of the individual to whom it is addressed. Any views
> or
> >> opinions expressed are solely those of the author and do not necessarily
> >> represent those of Shape Blue Ltd or related companies. If you are not
> the
> >> intended recipient of this email, you must neither take any action based
> >> upon its contents, nor copy or show it to anyone. Please contact the
> sender
> >> if you believe you have received this email in error. Shape Blue Ltd is
> a
> >> company incorporated in England & Wales. ShapeBlue Services India LLP
> is a
> >> company incorporated in India and is operated under license from Shape
> Blue
> >> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in
> Brasil
> >> and is operated under license from Shape Blue Ltd. ShapeBlue is a
> >> registered trademark.
> >>
>
> --
> @shankerbalan
>
> M: +91 98860 60539 | O: +91 (80) 67935867
> shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre,
> Bangalore - 560 055
>
> Find out more about ShapeBlue and our range of CloudStack related services
>
> IaaS Cloud Design & Build<
> http://shapeblue.com/iaas-cloud-design-and-build//>
> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> CloudStack Infrastructure Support<
> http://shapeblue.com/cloudstack-infrastructure-support/>
> CloudStack Bootcamp Training Courses<
> http://shapeblue.com/cloudstack-training/>
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is a
> company incorporated in India and is operated under license from Shape Blue
> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
> and is operated under license from Shape Blue Ltd. ShapeBlue is a
> registered trademark.
>

Re: SSVM & CPVM Public IP not pinging

Posted by Shanker Balan <sh...@shapeblue.com>.
Hi Tejas,


On 05-Jun-2014, at 5:04 pm, Tejas Gadaria <re...@gmail.com> wrote:

> Hi Shanker,
>
> Aww.. VLAN ID information for Public network provided to me was
> incorrected.

Sounds very familiar. While you are at it, make sure the guest VLANs
are also configured correctly across the switch ports.

I just put some screenshots together for the next time someone
has SSVM issues with XenServer.

http://shankerbalan.net/blog/cloudstack-ssvm-network-topology-with-xenserver/

> Just for Information..
>
> I have xen setup to isolate primary storage traffic, where Cloudstack MS &
> Secondary storage is on same NIC & primary storage is on separate NIC,
> secondary storage traffic is moving from management NIC.

Cool. If you have the luxury, you could also bond NICs to increase
the bandwidth.


> For testing purpose I am planning to implement swift as secondary sorage,
> So is there any way i can isolate secondary storage traffic from management
> NIC.
>

The Storage network is actually meant for secondary storage. If you want to
route primary storage traffic also over the storage network, make sure that
the primary storage device is also on the same subnet as the secondary storage.

Linux networking will take care of pushing both pri/sec storage traffic
over the right interface.


> Regards,
> Tejas
>
>
> Regards,
> Tejas
>
>
>
> On Thu, Jun 5, 2014 at 3:48 PM, Shanker Balan <sh...@shapeblue.com>
> wrote:
>
>> Comments inline.
>>
>> On 05-Jun-2014, at 3:02 pm, Tejas Gadaria <re...@gmail.com> wrote:
>>
>>> Hi Shanker,
>>>
>>> 1) Also I am not able to ping to gateway.
>>
>>
>> Not good.
>>
>>> 2) Here is the ssvm-check output..
>>>
>>> root@s-1-VM:/usr/local/cloud/systemvm# sh ssvm-check.sh
>>> ================================================
>>> First DNS server is  8.8.8.8
>>> PING 8.8.8.8 (8.8.8.8): 48 data bytes
>>> 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=62.104 ms
>>> 56 bytes from 8.8.8.8: icmp_seq=1 ttl=46 time=62.306 ms
>>> --- 8.8.8.8 ping statistics ---
>>> 2 packets transmitted, 2 packets received, 0% packet loss
>>> round-trip min/avg/max/stddev = 62.104/62.205/62.306/0.101 ms
>>> Good: Can ping DNS server
>>> ================================================
>>> Good: DNS resolves download.cloud.com
>>> ================================================
>>> nfs is currently mounted
>>> Mount point is /mnt/SecStorage/fde1faee-5559-3165-82a8-0078c7b99c08
>>> Good: Can write to mount point
>>> ================================================
>>> Management server is 10.129.151.55. Checking connectivity.
>>> Good: Can connect to management server port 8250
>>> ================================================
>>> Good: Java process is running
>>> ================================================
>>> Tests Complete. Look for ERROR or WARNING above.
>>>
>>>
>>> But in ssvm /var/log/cloud/cloud.out i found below logs.
>>>
>>> 06:41:01,502  INFO NioClient:81 - Connected to 10.129.151.55:8250
>>> 06:41:01,681  INFO Agent:421 - Proccess agent startup answer, agent id =
>> 0
>>> 06:41:01,681  INFO Agent:267 - Set agent id 0
>>> 06:41:01,699  INFO Agent:431 - Startup Response Received: agent id = 0
>>> 06:41:01,741  INFO NfsSecondaryStorageResource:2482 - Determined host
>>> 10.129.155.101 corresponds to IP 10.129.155.101
>>> 06:41:01,742  INFO NfsSecondaryStorageResource:2482 - Determined host
>>> 10.129.155.101 corresponds to IP 10.129.155.101
>>> 06:41:03,954  INFO NfsSecondaryStorageResource:2482 - Determined host
>>> 10.129.155.101 corresponds to IP 10.129.155.101
>>> 06:43:12,830 ERROR NfsSecondaryStorageResource:2396 - Unable to mount
>>> 10.129.155.101:/vol/secondary at
>>> /mnt/SecStorage/548477a5-73f6-3dd6-9179-93e4c92a3329 due to mount.nfs:
>>> Connection timed out
>>>
>>
>>
>> ssvm-check and logs dont seem to agree on the secondary storage.
>>
>>> nfs is currently mounted
>>> Mount point is /mnt/SecStorage/fde1faee-5559-3165-82a8-0078c7b99c08
>>> Good: Can write to mount point
>>
>> ssvm-check says it can write to the mount point.
>>
>>> 06:43:12,830 ERROR NfsSecondaryStorageResource:2396 - Unable to mount
>>> 10.129.155.101:/vol/secondary at
>>> /mnt/SecStorage/548477a5-73f6-3dd6-9179-93e4c92a3329 due to mount.nfs:
>>> Connection timed out
>>
>>
>> And here the log shows timeouts.
>>
>>
>>> Also on public interface & Storage interface,are not trunk.Only
>> inter-vlan
>>> routing is enable.
>>
>>
>> Have you checked if the SSVM’s virtual interfaces got bridged to the
>> physical
>> interfaces as per your label scheme? Have you run tcpdump to see if the
>> packets are going over the right interface? Can you snoop on the switch
>> end to
>> see if the packets are indeed making it out the interface? Are the switches
>> configured with VLANs correctly?
>>
>>
>>>
>>>
>>> Regards,
>>> Tejas
>>>
>>>
>>>
>>> On Thu, Jun 5, 2014 at 11:40 AM, Shanker Balan <
>> shanker.balan@shapeblue.com>
>>> wrote:
>>>
>>>> Hi Tejas,
>>>>
>>>> comments inline.
>>>>
>>>> On 04-Jun-2014, at 1:09 pm, Tejas Gadaria <re...@gmail.com>
>> wrote:
>>>>
>>>>> Hi,
>>>>>
>>>>> I am trying to create setup with xenserver, where Storage,public,Guest
>> &
>>>>> Management traffic will be carried by 4 diff. nics & all are in
>> different
>>>>> VLAN.
>>>>> After assigning the name-label in xen. System vm's are created but I am
>>>> not
>>>>> able ping to SSVM & CPVM public IP .
>>>>>
>>>>> root@s-1-VM:~# route
>>>>> Kernel IP routing table
>>>>> Destination     Gateway         Genmask         Flags Metric Ref    Use
>>>>> Iface
>>>>> default         10.129.152.1    0.0.0.0         UG    0      0        0
>>>> eth2
>>>>> google-public-d 10.129.151.1    255.255.255.255 UGH   0      0        0
>>>> eth1
>>>>> 10.129.151.0    *               255.255.255.0   U     0      0        0
>>>> eth1
>>>>> 10.129.152.0    *               255.255.255.0   U     0      0        0
>>>> eth2
>>>>> 10.129.155.0    *               255.255.255.0   U     0      0        0
>>>> eth3
>>>>> link-local      *               255.255.0.0     U     0      0        0
>>>> eth0
>>>>>
>>>>> root@s-1-VM:~# ping 8.8.8.8
>>>>> PING 8.8.8.8 (8.8.8.8): 48 data bytes
>>>>> 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=64.948 ms
>>>>> ^C--- 8.8.8.8 ping statistics ---
>>>>> 1 packets transmitted, 1 packets received, 0% packet loss
>>>>> round-trip min/avg/max/stddev = 64.948/64.948/64.948/0.000 ms
>>>>
>>>> You are able to reach Google DNS because there is a static
>>>> route to 8.8.8.8 via the management subnet.
>>>>
>>>>
>>>>> I am not able to ping to Storage from SSVM either.
>>>>>
>>>>> Following below link right now.
>>>>>
>>>>
>> https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting
>>>>
>>>>
>>>> Can share the full output of ssvm-check.sh?
>>>>
>>>> Can you ping the gateway? If not, it could be that:
>>>>
>>>> 1) 10.129.152.0 subnet is not routable or cant reach 10.129.152.1
>>>> 2) eth2 is bridged to the interfaces labeled for public traffic
>>>>
>>>> I would check if each of the virtual interfaces are bridged to the right
>>>> physical interface on the XenServer labeled interfaces.
>>>>
>>>> tcpdump on all the interfaces on the SSVM and on the physical
>>>> interfaces will also help identify the issue.
>>>>
>>>> Regards.
>>>>
>>>> --
>>>> @shankerbalan
>>
>> --
>> @shankerbalan
>>
>> M: +91 98860 60539 | O: +91 (80) 67935867
>> shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
>> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre,
>> Bangalore - 560 055
>>
>> Find out more about ShapeBlue and our range of CloudStack related services
>>
>> IaaS Cloud Design & Build<
>> http://shapeblue.com/iaas-cloud-design-and-build//>
>> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
>> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
>> CloudStack Infrastructure Support<
>> http://shapeblue.com/cloudstack-infrastructure-support/>
>> CloudStack Bootcamp Training Courses<
>> http://shapeblue.com/cloudstack-training/>
>>
>> This email and any attachments to it may be confidential and are intended
>> solely for the use of the individual to whom it is addressed. Any views or
>> opinions expressed are solely those of the author and do not necessarily
>> represent those of Shape Blue Ltd or related companies. If you are not the
>> intended recipient of this email, you must neither take any action based
>> upon its contents, nor copy or show it to anyone. Please contact the sender
>> if you believe you have received this email in error. Shape Blue Ltd is a
>> company incorporated in England & Wales. ShapeBlue Services India LLP is a
>> company incorporated in India and is operated under license from Shape Blue
>> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
>> and is operated under license from Shape Blue Ltd. ShapeBlue is a
>> registered trademark.
>>

--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, Bangalore - 560 055

Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//>
CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infrastructure-support/>
CloudStack Bootcamp Training Courses<http://shapeblue.com/cloudstack-training/>

This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.

Re: SSVM & CPVM Public IP not pinging

Posted by Tejas Gadaria <re...@gmail.com>.
Hi Shanker,

Aww.. VLAN ID information for Public network provided to me was
incorrected.

Just for Information..

I have xen setup to isolate primary storage traffic, where Cloudstack MS &
Secondary storage is on same NIC & primary storage is on separate NIC,
secondary storage traffic is moving from management NIC.

 For testing purpose I am planning to implement swift as secondary sorage,
So is there any way i can isolate secondary storage traffic from management
NIC.

Regards,
Tejas


Regards,
Tejas



On Thu, Jun 5, 2014 at 3:48 PM, Shanker Balan <sh...@shapeblue.com>
wrote:

> Comments inline.
>
> On 05-Jun-2014, at 3:02 pm, Tejas Gadaria <re...@gmail.com> wrote:
>
> > Hi Shanker,
> >
> > 1) Also I am not able to ping to gateway.
>
>
> Not good.
>
> > 2) Here is the ssvm-check output..
> >
> > root@s-1-VM:/usr/local/cloud/systemvm# sh ssvm-check.sh
> > ================================================
> > First DNS server is  8.8.8.8
> > PING 8.8.8.8 (8.8.8.8): 48 data bytes
> > 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=62.104 ms
> > 56 bytes from 8.8.8.8: icmp_seq=1 ttl=46 time=62.306 ms
> > --- 8.8.8.8 ping statistics ---
> > 2 packets transmitted, 2 packets received, 0% packet loss
> > round-trip min/avg/max/stddev = 62.104/62.205/62.306/0.101 ms
> > Good: Can ping DNS server
> > ================================================
> > Good: DNS resolves download.cloud.com
> > ================================================
> > nfs is currently mounted
> > Mount point is /mnt/SecStorage/fde1faee-5559-3165-82a8-0078c7b99c08
> > Good: Can write to mount point
> > ================================================
> > Management server is 10.129.151.55. Checking connectivity.
> > Good: Can connect to management server port 8250
> > ================================================
> > Good: Java process is running
> > ================================================
> > Tests Complete. Look for ERROR or WARNING above.
> >
> >
> > But in ssvm /var/log/cloud/cloud.out i found below logs.
> >
> > 06:41:01,502  INFO NioClient:81 - Connected to 10.129.151.55:8250
> > 06:41:01,681  INFO Agent:421 - Proccess agent startup answer, agent id =
> 0
> > 06:41:01,681  INFO Agent:267 - Set agent id 0
> > 06:41:01,699  INFO Agent:431 - Startup Response Received: agent id = 0
> > 06:41:01,741  INFO NfsSecondaryStorageResource:2482 - Determined host
> > 10.129.155.101 corresponds to IP 10.129.155.101
> > 06:41:01,742  INFO NfsSecondaryStorageResource:2482 - Determined host
> > 10.129.155.101 corresponds to IP 10.129.155.101
> > 06:41:03,954  INFO NfsSecondaryStorageResource:2482 - Determined host
> > 10.129.155.101 corresponds to IP 10.129.155.101
> > 06:43:12,830 ERROR NfsSecondaryStorageResource:2396 - Unable to mount
> > 10.129.155.101:/vol/secondary at
> > /mnt/SecStorage/548477a5-73f6-3dd6-9179-93e4c92a3329 due to mount.nfs:
> > Connection timed out
> >
>
>
> ssvm-check and logs dont seem to agree on the secondary storage.
>
> > nfs is currently mounted
> > Mount point is /mnt/SecStorage/fde1faee-5559-3165-82a8-0078c7b99c08
> > Good: Can write to mount point
>
> ssvm-check says it can write to the mount point.
>
> > 06:43:12,830 ERROR NfsSecondaryStorageResource:2396 - Unable to mount
> > 10.129.155.101:/vol/secondary at
> > /mnt/SecStorage/548477a5-73f6-3dd6-9179-93e4c92a3329 due to mount.nfs:
> > Connection timed out
>
>
> And here the log shows timeouts.
>
>
> > Also on public interface & Storage interface,are not trunk.Only
> inter-vlan
> > routing is enable.
>
>
> Have you checked if the SSVM’s virtual interfaces got bridged to the
> physical
> interfaces as per your label scheme? Have you run tcpdump to see if the
> packets are going over the right interface? Can you snoop on the switch
> end to
> see if the packets are indeed making it out the interface? Are the switches
> configured with VLANs correctly?
>
>
> >
> >
> > Regards,
> > Tejas
> >
> >
> >
> > On Thu, Jun 5, 2014 at 11:40 AM, Shanker Balan <
> shanker.balan@shapeblue.com>
> > wrote:
> >
> >> Hi Tejas,
> >>
> >> comments inline.
> >>
> >> On 04-Jun-2014, at 1:09 pm, Tejas Gadaria <re...@gmail.com>
> wrote:
> >>
> >>> Hi,
> >>>
> >>> I am trying to create setup with xenserver, where Storage,public,Guest
> &
> >>> Management traffic will be carried by 4 diff. nics & all are in
> different
> >>> VLAN.
> >>> After assigning the name-label in xen. System vm's are created but I am
> >> not
> >>> able ping to SSVM & CPVM public IP .
> >>>
> >>> root@s-1-VM:~# route
> >>> Kernel IP routing table
> >>> Destination     Gateway         Genmask         Flags Metric Ref    Use
> >>> Iface
> >>> default         10.129.152.1    0.0.0.0         UG    0      0        0
> >> eth2
> >>> google-public-d 10.129.151.1    255.255.255.255 UGH   0      0        0
> >> eth1
> >>> 10.129.151.0    *               255.255.255.0   U     0      0        0
> >> eth1
> >>> 10.129.152.0    *               255.255.255.0   U     0      0        0
> >> eth2
> >>> 10.129.155.0    *               255.255.255.0   U     0      0        0
> >> eth3
> >>> link-local      *               255.255.0.0     U     0      0        0
> >> eth0
> >>>
> >>> root@s-1-VM:~# ping 8.8.8.8
> >>> PING 8.8.8.8 (8.8.8.8): 48 data bytes
> >>> 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=64.948 ms
> >>> ^C--- 8.8.8.8 ping statistics ---
> >>> 1 packets transmitted, 1 packets received, 0% packet loss
> >>> round-trip min/avg/max/stddev = 64.948/64.948/64.948/0.000 ms
> >>
> >> You are able to reach Google DNS because there is a static
> >> route to 8.8.8.8 via the management subnet.
> >>
> >>
> >>> I am not able to ping to Storage from SSVM either.
> >>>
> >>> Following below link right now.
> >>>
> >>
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting
> >>
> >>
> >> Can share the full output of ssvm-check.sh?
> >>
> >> Can you ping the gateway? If not, it could be that:
> >>
> >> 1) 10.129.152.0 subnet is not routable or cant reach 10.129.152.1
> >> 2) eth2 is bridged to the interfaces labeled for public traffic
> >>
> >> I would check if each of the virtual interfaces are bridged to the right
> >> physical interface on the XenServer labeled interfaces.
> >>
> >> tcpdump on all the interfaces on the SSVM and on the physical
> >> interfaces will also help identify the issue.
> >>
> >> Regards.
> >>
> >> --
> >> @shankerbalan
>
> --
> @shankerbalan
>
> M: +91 98860 60539 | O: +91 (80) 67935867
> shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre,
> Bangalore - 560 055
>
> Find out more about ShapeBlue and our range of CloudStack related services
>
> IaaS Cloud Design & Build<
> http://shapeblue.com/iaas-cloud-design-and-build//>
> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> CloudStack Infrastructure Support<
> http://shapeblue.com/cloudstack-infrastructure-support/>
> CloudStack Bootcamp Training Courses<
> http://shapeblue.com/cloudstack-training/>
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is a
> company incorporated in India and is operated under license from Shape Blue
> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
> and is operated under license from Shape Blue Ltd. ShapeBlue is a
> registered trademark.
>

Re: SSVM & CPVM Public IP not pinging

Posted by Shanker Balan <sh...@shapeblue.com>.
Comments inline.

On 05-Jun-2014, at 3:02 pm, Tejas Gadaria <re...@gmail.com> wrote:

> Hi Shanker,
>
> 1) Also I am not able to ping to gateway.


Not good.

> 2) Here is the ssvm-check output..
>
> root@s-1-VM:/usr/local/cloud/systemvm# sh ssvm-check.sh
> ================================================
> First DNS server is  8.8.8.8
> PING 8.8.8.8 (8.8.8.8): 48 data bytes
> 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=62.104 ms
> 56 bytes from 8.8.8.8: icmp_seq=1 ttl=46 time=62.306 ms
> --- 8.8.8.8 ping statistics ---
> 2 packets transmitted, 2 packets received, 0% packet loss
> round-trip min/avg/max/stddev = 62.104/62.205/62.306/0.101 ms
> Good: Can ping DNS server
> ================================================
> Good: DNS resolves download.cloud.com
> ================================================
> nfs is currently mounted
> Mount point is /mnt/SecStorage/fde1faee-5559-3165-82a8-0078c7b99c08
> Good: Can write to mount point
> ================================================
> Management server is 10.129.151.55. Checking connectivity.
> Good: Can connect to management server port 8250
> ================================================
> Good: Java process is running
> ================================================
> Tests Complete. Look for ERROR or WARNING above.
>
>
> But in ssvm /var/log/cloud/cloud.out i found below logs.
>
> 06:41:01,502  INFO NioClient:81 - Connected to 10.129.151.55:8250
> 06:41:01,681  INFO Agent:421 - Proccess agent startup answer, agent id = 0
> 06:41:01,681  INFO Agent:267 - Set agent id 0
> 06:41:01,699  INFO Agent:431 - Startup Response Received: agent id = 0
> 06:41:01,741  INFO NfsSecondaryStorageResource:2482 - Determined host
> 10.129.155.101 corresponds to IP 10.129.155.101
> 06:41:01,742  INFO NfsSecondaryStorageResource:2482 - Determined host
> 10.129.155.101 corresponds to IP 10.129.155.101
> 06:41:03,954  INFO NfsSecondaryStorageResource:2482 - Determined host
> 10.129.155.101 corresponds to IP 10.129.155.101
> 06:43:12,830 ERROR NfsSecondaryStorageResource:2396 - Unable to mount
> 10.129.155.101:/vol/secondary at
> /mnt/SecStorage/548477a5-73f6-3dd6-9179-93e4c92a3329 due to mount.nfs:
> Connection timed out
>


ssvm-check and logs dont seem to agree on the secondary storage.

> nfs is currently mounted
> Mount point is /mnt/SecStorage/fde1faee-5559-3165-82a8-0078c7b99c08
> Good: Can write to mount point

ssvm-check says it can write to the mount point.

> 06:43:12,830 ERROR NfsSecondaryStorageResource:2396 - Unable to mount
> 10.129.155.101:/vol/secondary at
> /mnt/SecStorage/548477a5-73f6-3dd6-9179-93e4c92a3329 due to mount.nfs:
> Connection timed out


And here the log shows timeouts.


> Also on public interface & Storage interface,are not trunk.Only inter-vlan
> routing is enable.


Have you checked if the SSVM’s virtual interfaces got bridged to the physical
interfaces as per your label scheme? Have you run tcpdump to see if the
packets are going over the right interface? Can you snoop on the switch end to
see if the packets are indeed making it out the interface? Are the switches
configured with VLANs correctly?


>
>
> Regards,
> Tejas
>
>
>
> On Thu, Jun 5, 2014 at 11:40 AM, Shanker Balan <sh...@shapeblue.com>
> wrote:
>
>> Hi Tejas,
>>
>> comments inline.
>>
>> On 04-Jun-2014, at 1:09 pm, Tejas Gadaria <re...@gmail.com> wrote:
>>
>>> Hi,
>>>
>>> I am trying to create setup with xenserver, where Storage,public,Guest &
>>> Management traffic will be carried by 4 diff. nics & all are in different
>>> VLAN.
>>> After assigning the name-label in xen. System vm's are created but I am
>> not
>>> able ping to SSVM & CPVM public IP .
>>>
>>> root@s-1-VM:~# route
>>> Kernel IP routing table
>>> Destination     Gateway         Genmask         Flags Metric Ref    Use
>>> Iface
>>> default         10.129.152.1    0.0.0.0         UG    0      0        0
>> eth2
>>> google-public-d 10.129.151.1    255.255.255.255 UGH   0      0        0
>> eth1
>>> 10.129.151.0    *               255.255.255.0   U     0      0        0
>> eth1
>>> 10.129.152.0    *               255.255.255.0   U     0      0        0
>> eth2
>>> 10.129.155.0    *               255.255.255.0   U     0      0        0
>> eth3
>>> link-local      *               255.255.0.0     U     0      0        0
>> eth0
>>>
>>> root@s-1-VM:~# ping 8.8.8.8
>>> PING 8.8.8.8 (8.8.8.8): 48 data bytes
>>> 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=64.948 ms
>>> ^C--- 8.8.8.8 ping statistics ---
>>> 1 packets transmitted, 1 packets received, 0% packet loss
>>> round-trip min/avg/max/stddev = 64.948/64.948/64.948/0.000 ms
>>
>> You are able to reach Google DNS because there is a static
>> route to 8.8.8.8 via the management subnet.
>>
>>
>>> I am not able to ping to Storage from SSVM either.
>>>
>>> Following below link right now.
>>>
>> https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting
>>
>>
>> Can share the full output of ssvm-check.sh?
>>
>> Can you ping the gateway? If not, it could be that:
>>
>> 1) 10.129.152.0 subnet is not routable or cant reach 10.129.152.1
>> 2) eth2 is bridged to the interfaces labeled for public traffic
>>
>> I would check if each of the virtual interfaces are bridged to the right
>> physical interface on the XenServer labeled interfaces.
>>
>> tcpdump on all the interfaces on the SSVM and on the physical
>> interfaces will also help identify the issue.
>>
>> Regards.
>>
>> --
>> @shankerbalan

--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, Bangalore - 560 055

Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//>
CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infrastructure-support/>
CloudStack Bootcamp Training Courses<http://shapeblue.com/cloudstack-training/>

This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.

Re: SSVM & CPVM Public IP not pinging

Posted by Tejas Gadaria <re...@gmail.com>.
Hi Shanker,

1) Also I am not able to ping to gateway.
2) Here is the ssvm-check output..

root@s-1-VM:/usr/local/cloud/systemvm# sh ssvm-check.sh
================================================
First DNS server is  8.8.8.8
PING 8.8.8.8 (8.8.8.8): 48 data bytes
56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=62.104 ms
56 bytes from 8.8.8.8: icmp_seq=1 ttl=46 time=62.306 ms
--- 8.8.8.8 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 62.104/62.205/62.306/0.101 ms
Good: Can ping DNS server
================================================
Good: DNS resolves download.cloud.com
================================================
nfs is currently mounted
Mount point is /mnt/SecStorage/fde1faee-5559-3165-82a8-0078c7b99c08
Good: Can write to mount point
================================================
Management server is 10.129.151.55. Checking connectivity.
Good: Can connect to management server port 8250
================================================
Good: Java process is running
================================================
Tests Complete. Look for ERROR or WARNING above.


But in ssvm /var/log/cloud/cloud.out i found below logs.

06:41:01,502  INFO NioClient:81 - Connected to 10.129.151.55:8250
06:41:01,681  INFO Agent:421 - Proccess agent startup answer, agent id = 0
06:41:01,681  INFO Agent:267 - Set agent id 0
06:41:01,699  INFO Agent:431 - Startup Response Received: agent id = 0
06:41:01,741  INFO NfsSecondaryStorageResource:2482 - Determined host
10.129.155.101 corresponds to IP 10.129.155.101
06:41:01,742  INFO NfsSecondaryStorageResource:2482 - Determined host
10.129.155.101 corresponds to IP 10.129.155.101
06:41:03,954  INFO NfsSecondaryStorageResource:2482 - Determined host
10.129.155.101 corresponds to IP 10.129.155.101
06:43:12,830 ERROR NfsSecondaryStorageResource:2396 - Unable to mount
10.129.155.101:/vol/secondary at
/mnt/SecStorage/548477a5-73f6-3dd6-9179-93e4c92a3329 due to mount.nfs:
Connection timed out

Also on public interface & Storage interface,are not trunk.Only inter-vlan
routing is enable.


Regards,
Tejas



On Thu, Jun 5, 2014 at 11:40 AM, Shanker Balan <sh...@shapeblue.com>
wrote:

> Hi Tejas,
>
> comments inline.
>
> On 04-Jun-2014, at 1:09 pm, Tejas Gadaria <re...@gmail.com> wrote:
>
> > Hi,
> >
> > I am trying to create setup with xenserver, where Storage,public,Guest &
> > Management traffic will be carried by 4 diff. nics & all are in different
> > VLAN.
> > After assigning the name-label in xen. System vm's are created but I am
> not
> > able ping to SSVM & CPVM public IP .
> >
> > root@s-1-VM:~# route
> > Kernel IP routing table
> > Destination     Gateway         Genmask         Flags Metric Ref    Use
> > Iface
> > default         10.129.152.1    0.0.0.0         UG    0      0        0
> eth2
> > google-public-d 10.129.151.1    255.255.255.255 UGH   0      0        0
> eth1
> > 10.129.151.0    *               255.255.255.0   U     0      0        0
> eth1
> > 10.129.152.0    *               255.255.255.0   U     0      0        0
> eth2
> > 10.129.155.0    *               255.255.255.0   U     0      0        0
> eth3
> > link-local      *               255.255.0.0     U     0      0        0
> eth0
> >
> > root@s-1-VM:~# ping 8.8.8.8
> > PING 8.8.8.8 (8.8.8.8): 48 data bytes
> > 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=64.948 ms
> > ^C--- 8.8.8.8 ping statistics ---
> > 1 packets transmitted, 1 packets received, 0% packet loss
> > round-trip min/avg/max/stddev = 64.948/64.948/64.948/0.000 ms
>
> You are able to reach Google DNS because there is a static
> route to 8.8.8.8 via the management subnet.
>
>
> > I am not able to ping to Storage from SSVM either.
> >
> > Following below link right now.
> >
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting
>
>
> Can share the full output of ssvm-check.sh?
>
> Can you ping the gateway? If not, it could be that:
>
> 1) 10.129.152.0 subnet is not routable or cant reach 10.129.152.1
> 2) eth2 is bridged to the interfaces labeled for public traffic
>
> I would check if each of the virtual interfaces are bridged to the right
> physical interface on the XenServer labeled interfaces.
>
> tcpdump on all the interfaces on the SSVM and on the physical
> interfaces will also help identify the issue.
>
> Regards.
>
> --
> @shankerbalan
>
> M: +91 98860 60539 | O: +91 (80) 67935867
> shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre,
> Bangalore - 560 055
>
> Find out more about ShapeBlue and our range of CloudStack related services
>
> IaaS Cloud Design & Build<
> http://shapeblue.com/iaas-cloud-design-and-build//>
> CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
> CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
> CloudStack Infrastructure Support<
> http://shapeblue.com/cloudstack-infrastructure-support/>
> CloudStack Bootcamp Training Courses<
> http://shapeblue.com/cloudstack-training/>
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is a
> company incorporated in India and is operated under license from Shape Blue
> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
> and is operated under license from Shape Blue Ltd. ShapeBlue is a
> registered trademark.
>

Re: SSVM & CPVM Public IP not pinging

Posted by Shanker Balan <sh...@shapeblue.com>.
Hi Tejas,

comments inline.

On 04-Jun-2014, at 1:09 pm, Tejas Gadaria <re...@gmail.com> wrote:

> Hi,
>
> I am trying to create setup with xenserver, where Storage,public,Guest &
> Management traffic will be carried by 4 diff. nics & all are in different
> VLAN.
> After assigning the name-label in xen. System vm's are created but I am not
> able ping to SSVM & CPVM public IP .
>
> root@s-1-VM:~# route
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> default         10.129.152.1    0.0.0.0         UG    0      0        0 eth2
> google-public-d 10.129.151.1    255.255.255.255 UGH   0      0        0 eth1
> 10.129.151.0    *               255.255.255.0   U     0      0        0 eth1
> 10.129.152.0    *               255.255.255.0   U     0      0        0 eth2
> 10.129.155.0    *               255.255.255.0   U     0      0        0 eth3
> link-local      *               255.255.0.0     U     0      0        0 eth0
>
> root@s-1-VM:~# ping 8.8.8.8
> PING 8.8.8.8 (8.8.8.8): 48 data bytes
> 56 bytes from 8.8.8.8: icmp_seq=0 ttl=46 time=64.948 ms
> ^C--- 8.8.8.8 ping statistics ---
> 1 packets transmitted, 1 packets received, 0% packet loss
> round-trip min/avg/max/stddev = 64.948/64.948/64.948/0.000 ms

You are able to reach Google DNS because there is a static
route to 8.8.8.8 via the management subnet.


> I am not able to ping to Storage from SSVM either.
>
> Following below link right now.
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/SSVM%2C+templates%2C+Secondary+storage+troubleshooting


Can share the full output of ssvm-check.sh?

Can you ping the gateway? If not, it could be that:

1) 10.129.152.0 subnet is not routable or cant reach 10.129.152.1
2) eth2 is bridged to the interfaces labeled for public traffic

I would check if each of the virtual interfaces are bridged to the right
physical interface on the XenServer labeled interfaces.

tcpdump on all the interfaces on the SSVM and on the physical
interfaces will also help identify the issue.

Regards.

--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, Bangalore - 560 055

Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//>
CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infrastructure-support/>
CloudStack Bootcamp Training Courses<http://shapeblue.com/cloudstack-training/>

This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is a company incorporated in India and is operated under license from Shape Blue Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.