Anda, Have you done a tcpdump on the send and receive compute host uplink interfaces to see where the drop might be happening?
Please also check the status of the flow on the vrouter by running “flow –l match <sender-IP>” And dropstats on the vrouter. -Dilip From: Dev <dev-boun...@lists.opencontrail.org> on behalf of Anda Nicolae <anico...@lenovo.com> Date: Friday, August 18, 2017 at 7:11 AM To: "dev@lists.opencontrail.org" <dev@lists.opencontrail.org> Subject: [opencontrail-dev] L2 forwarding mode and RBAC not working Hi all, I have a server running CentOS 7.3 with 4 VMs: 1st VM is the OpenStack node, the 2nd VM is the Contrail controller node, the 3rd and the 4th VMs are Contrail compute nodes. CentOS 7.3 is running on all the 3 VMs. Contrail version I am using is 3.2.5.0. In /etc/contrail/contrail-analytics-api.conf and in /etc/contrail/contrail-api.conf, I have added the line: aaa_mode = rbac then I have restarted supervisor-config and supervisor-analytics processes. From OpenStack I have created a new user named myuser, and a new role named myrole: openstack role create myrole openstack role add --project demo --user myuser myrole From Configure -> Infrastructure -> RBAC, Project tab, for default-domain, demo project, I have added a new API Access Rule, like in RBACAPI.PNG From Configure -> Infrastructure -> Global Config, I have set Forwarding Mode as L2 only. On the demo project, I have created 2 VMs in the same virtual network and I have issued a ping from one VM to another. Ping is not working between VMs, which is wrong. Do you know which might be the cause for ping not working between VMs? Thanks, Anda
_______________________________________________ Dev mailing list Dev@lists.opencontrail.org http://lists.opencontrail.org/mailman/listinfo/dev_lists.opencontrail.org