Anda,

Have you done a tcpdump on the send and receive compute host uplink interfaces 
to see where the drop might be happening?

Please also check the status of the flow on the vrouter by running “flow –l 
match <sender-IP>”

And dropstats on the vrouter.

-Dilip

From: Dev <dev-boun...@lists.opencontrail.org> on behalf of Anda Nicolae 
<anico...@lenovo.com>
Date: Friday, August 18, 2017 at 7:11 AM
To: "dev@lists.opencontrail.org" <dev@lists.opencontrail.org>
Subject: [opencontrail-dev] L2 forwarding mode and RBAC not working

Hi all,

I have a server running CentOS 7.3 with 4 VMs: 1st VM is the OpenStack node, 
the 2nd VM is the Contrail controller node, the 3rd and the 4th VMs are 
Contrail compute nodes.
CentOS 7.3 is running on all the 3 VMs. Contrail version I am using is 3.2.5.0.

In /etc/contrail/contrail-analytics-api.conf and in 
/etc/contrail/contrail-api.conf, I have added the line:
aaa_mode = rbac
then I have restarted supervisor-config and supervisor-analytics processes.

From OpenStack I have created a new user named myuser, and a new role named 
myrole:
openstack role create myrole
openstack role add --project demo --user myuser myrole
From Configure -> Infrastructure -> RBAC, Project tab, for default-domain, demo 
project, I have added a new API Access Rule, like in RBACAPI.PNG
From Configure -> Infrastructure -> Global Config, I have set Forwarding Mode 
as L2 only.

On the demo project, I have created 2 VMs in the same virtual network and I 
have issued a ping from one VM to another.
Ping is not working between VMs, which is wrong.

Do you know which might be the cause for ping not working between VMs?

Thanks,
Anda
_______________________________________________
Dev mailing list
Dev@lists.opencontrail.org
http://lists.opencontrail.org/mailman/listinfo/dev_lists.opencontrail.org

Reply via email to