早上好。
我有一台旧的OpenStack服务器（IceHouse在Ubuntu 12上运行），网络已断开。我可以在其外部IP上访问主主机，但不能在其内部或外部IP上访问任何VM。我正在尝试对此进行修复，因为有一天它刚刚停止工作，并且由于我没有为此设置网络（一个老朋友做了），而且我的网络状况也不佳。
所以我的OpenStack设置如下：
物理服务器-外部IP +内部IP 10.0.0.1物理服务器中的5个VM-每个VM分别具有自己的外部IP +内部IP 10.0.0.2/3/5/6/12
brctl显示
bridge name bridge id STP enabled interfaces
br100 8000.002590a623ea no eth0
vnet0
virbr0 8000.000000000000 yes
cat /var/lib/libvirt/network/default.xml
<networkstatus>
<class_id bitmap='0-2'/>
<floor sum='0'/>
<network>
<name>default</name>
<uuid>1418323a-ec13-4ea0-b342-c3263e44c4c4</uuid>
<forward mode='nat'>
<nat>
<port start='1024' end='65535'/>
</nat>
</forward>
<bridge name='virbr0' stp='on' delay='0'/>
<ip address='192.168.122.1' netmask='255.255.255.0'>
<dhcp>
<range start='192.168.122.2' end='192.168.122.254'/>
</dhcp>
</ip>
</network>
</networkstatus>
ifconfig
br100 Link encap:Ethernet HWaddr 00:25:90:a6:23:ea
inet addr:10.0.0.1 Bcast:10.0.0.255 Mask:255.255.255.0
inet6 addr: fe80::225:90ff:fea6:23ea/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:21253 errors:0 dropped:0 overruns:0 frame:0
TX packets:14720 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1346723 (1.3 MB) TX bytes:1655846 (1.6 MB)
eth0 Link encap:Ethernet HWaddr 00:25:90:a6:23:ea
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:21898 errors:0 dropped:68 overruns:0 frame:0
TX packets:14881 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1828683 (1.8 MB) TX bytes:1655116 (1.6 MB)
Memory:fb920000-fb940000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:110260 errors:0 dropped:0 overruns:0 frame:0
TX packets:110260 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:37015458 (37.0 MB) TX bytes:37015458 (37.0 MB)
tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:172.16.17.1 P-t-P:172.16.17.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
virbr0 Link encap:Ethernet HWaddr aa:88:14:70:4d:e2
inet addr:192.168.122.1 Bcast:192.168.122.255 Mask:255.255.255.0
inet6 addr: fe80::a888:14ff:fe70:4de2/64 Scope:Link
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:588 (588.0 B)
vnet0 Link encap:Ethernet HWaddr fe:16:3e:24:da:f2
inet6 addr: fe80::fc16:3eff:fe24:daf2/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:113 errors:0 dropped:0 overruns:0 frame:0
TX packets:3849 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:13581 (13.5 KB) TX bytes:356808 (356.8 KB)
ip a | grep状态
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master br100 state UP qlen 1000
3: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
4: br100: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP
5: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN
6: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
8: vnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br100 state UNKNOWN qlen 500
ip route（X.X.X.X是面向外部的公共IP）
default via X.X.X.254 dev br100 metric 100
10.0.0.0/24 dev br100 proto kernel scope link src 10.0.0.1
X.X.X.0/24 dev br100 proto kernel scope link src X.X.X.X
172.16.17.0/24 via 172.16.17.2 dev tun0
172.16.17.2 dev tun0 proto kernel scope link src 172.16.17.1
192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1
192.168.122.0/24 dev br100 proto kernel scope link src 192.168.122.222
我无法从外部或内部ping或SSH到VM。从10.0.0.1开始的10.0.0.5和VM启动时10.0.0.5显示如下：
[....] Configuring network interfaces...Internet Systems Consortium DHCP Client 4.2.2
Copyright 2004-2011 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
Listening on LPF/eth0/fa:16:3e:24:da:f2
Sending on LPF/eth0/fa:16:3e:24:da:f2
Sending on Socket/fallback
DHCPREQUEST on eth0 to 255.255.255.255 port 67
DHCPACK from 10.0.0.1
bound to 10.0.0.5 -- renewal in 50 seconds.
ci-info: +++++++++++++++++++++++++Net device info+++++++++++++++++++++++++
ci-info: +--------+------+-----------+---------------+-------------------+
ci-info: | Device | Up | Address | Mask | Hw-Address |
ci-info: +--------+------+-----------+---------------+-------------------+
ci-info: | lo | True | 127.0.0.1 | 255.0.0.0 | . |
ci-info: | eth0 | True | 10.0.0.5 | 255.255.255.0 | fa:16:3e:24:da:f2 |
ci-info: +--------+------+-----------+---------------+-------------------+
ci-info: ++++++++++++++++++++++++++++++Route info++++++++++++++++++++++++++++++
ci-info: +-------+-------------+----------+---------------+-----------+-------+
ci-info: | Route | Destination | Gateway | Genmask | Interface | Flags |
ci-info: +-------+-------------+----------+---------------+-----------+-------+
ci-info: | 0 | 0.0.0.0 | 10.0.0.1 | 0.0.0.0 | eth0 | UG |
ci-info: | 1 | 10.0.0.0 | 0.0.0.0 | 255.255.255.0 | eth0 | U |
ci-info: +-------+-------------+----------+---------------+-----------+-------+
virsh列表
Id Name State
----------------------------------------------------
3 instance-00000025 running
任何人都可以帮助网络菜鸟吗？
我建议您开始查看配置的安全组，并查看是否存在端口22上icmp和tcp的入口规则以接受连接。
默认情况下，Openstack安全组拒绝外部流量。