Hi Ameen,

comments inline.

On 19-Apr-2014, at 11:02 pm, Ameen Ali <rootam...@gmail.com> wrote:

> Dear CloudStackers,
>
> I've been having this issue for quite a while. My SSVM is not able to ping
> the Management Server or  DNS or resolve download.cloud.com Therefor I am
> not able to download any template even if I'm hosting them inside the
> Management Server itself. I tried disabling iptables on both management
> server and host but still nothing is happening.

Ok.

> Notice the following:
> 172.16.96.2 is my gateway
> 172.16.96.10 is my management server (Cloudstack 4.0.2)
> 172.16.96.40 is my host (XenServer 6.0)

Is this an advanced Zone? If so,

1) How many physical interfaces does your hypervisor have?
2) Since you are using Xen, what traffic labels have you assigned
 while creating the Zone?
3) Have you created the traffic labels on the XenServer hosts?
4) What subnet have you used as the public range?


>
> The following is the output of ssvm_check.sh.
>
> ​================================================
> First DNS server is  8.8.8.8
> PING 8.8.8.8 (8.8.8.8): 56 data bytes
> 64 bytes from 172.16.96.46: Destination Host Unreachable
> Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst Data
> 4  5  00 5400 0000   0 0040  40  01 5b1e 172.16.96.46  8.8.8.8
> 64 bytes from 172.16.96.46: Destination Host Unreachable
> Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst Data
> 4  5  00 5400 0000   0 0040  40  01 5b1e 172.16.96.46  8.8.8.8
> --- 8.8.8.8 ping statistics ---
> 2 packets transmitted, 0 packets received, 100% packet loss
> WARNING: cannot ping DNS server
> route follows
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> 8.8.4.4         172.16.96.2     255.255.255.255 UGH   0      0        0 eth1
> 8.8.8.8         172.16.96.2     255.255.255.255 UGH   0      0        0 eth1
> 172.16.96.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
> 172.16.96.0     0.0.0.0         255.255.255.0   U     0      0        0 eth2
> 172.16.96.0     0.0.0.0         255.255.255.0   U     0      0        0 eth3
> 169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth0
> 0.0.0.0         172.16.96.2     0.0.0.0         UG    0      0        0 eth2


According to your routing table, the DNS servers is expected to
be reachable via 172.16.96.2 gateway IP using the eth1 Interface
on the SSVM.

Are you able to ping 172.16.96.2 from the SSVM at all?

If ping to 172.16.96.2 is failing, can you double check your traffic labels
against the physical interfaces. For the network to work correctly,
the SSVM’s interfaces has to be bridged to the correct physical interface
on the hypervisor. CloudStack does this mapping using the traffic labels
which you specified at the time of zone creation.


> ================================================
> ERROR: DNS not resolving download.cloud.com
> resolv.conf follows
> nameserver 8.8.8.8
> nameserver 8.8.4.4
> nameserver 8.8.8.8
> nameserver 8.8.4.4
> ​​
> ​
> ​
> ================================================​
>
>
>
> ​The following is part of the output of the following command: "grep -i -E
> 'exc|unable|fail|invalid|leak|invalid|warn'
> /var/log/cloud/management/management-server.log" ​:
> ​
> ​
> ​
> ================================================​
> 2014-04-17 05:51:09,356 WARN  [xen.resource.CitrixResourceBase]
> (DirectAgent-4:null) Failed to program default network rules for s-4-VM
> 2014-04-17 05:51:14,782 WARN  [network.element.VpcVirtualRouterElement]
> (consoleproxy-1:null) Network Ntwk[204|Guest|6] is not associated with any
> VPC
> 2014-04-17 05:51:14,799 WARN  [network.element.VpcVirtualRouterElement]
> (consoleproxy-1:null) Network Ntwk[202|Control|3] is not associated with
> any VPC
> 2014-04-17 05:51:14,819 WARN  [network.element.VpcVirtualRouterElement]
> (consoleproxy-1:null) Network Ntwk[201|Management|2] is not associated with
> any VPC
> 2014-04-17 05:51:56,275 WARN  [xen.resource.CitrixResourceBase]
> (DirectAgent-163:null) Ignoring VM v-5-VM in transition state starting.
> 2014-04-17 05:51:58,387 WARN  [xen.resource.CitrixResourceBase]
> (DirectAgent-96:null) Failed to program default network rules for v-5-VM
> 2014-04-17 06:24:51,091 DEBUG [xen.resource.XenServerConnectionPool]
> (DirectAgent-235:null) XmlRpcException for method: host.get_by_uuid due to
> Failed to read server's response: connect timed out.  Reconnecting...retry=1
> 2014-04-17 06:24:51,092 DEBUG [xen.resource.XenServerConnectionPool]
> (DirectAgent-235:null) connect through IP(172.16.96.40 for
> pool(e024bf43-7efc-daed-3644-6b7c9a5a6ceb) is broken due to
> org.apache.xmlrpc.XmlRpcException: Failed to read server's response:
> connect timed out
> 2014-04-17 06:52:47,943 DEBUG [xen.resource.XenServerConnectionPool]
> (DirectAgent-276:null) XmlRpcException for method: SR.scan due to Failed to
> create input stream: Read timed out.  Reconnecting...retry=1
> 2014-04-17 06:52:47,943 WARN  [xen.resource.CitrixResourceBase]
> (DirectAgent-276:null) GetStorageStats Exception:Failed to create input
> stream: Read timed outhost:43ae57e7-b43e-4d84-a500-da1098e5240estorageid:
> c38aeaca-2bb6-339b-9053-8287b3a61bb6
> 2014-04-17 07:00:38,174 DEBUG [cloud.api.ApiServlet] (catalina-exec-6:null)
> Invalid paramemter in URL found. param: domain=
> 2014-04-17 07:00:56,280 WARN  [xen.resource.CitrixResourceBase]
> (DirectAgent-108:null) Ignoring vm v-5-VM because of a lag in stopping the
> vm.
> 2014-04-17 07:01:14,447 WARN  [network.element.VpcVirtualRouterElement]
> (secstorage-1:null) Network Ntwk[204|Guest|6] is not associated with any VPC
> 2014-04-17 07:01:14,464 WARN  [network.element.VpcVirtualRouterElement]
> (secstorage-1:null) Network Ntwk[202|Control|3] is not associated with any
> VPC
> 2014-04-17 07:01:14,478 WARN  [network.element.VpcVirtualRouterElement]
> (secstorage-1:null) Network Ntwk[201|Management|2] is not associated with
> any VPC
> 2014-04-17 07:01:14,494 WARN  [network.element.VpcVirtualRouterElement]
> (secstorage-1:null) Network Ntwk[203|Storage|4] is not associated with any
> VPC
> 2014-04-17 07:01:14,779 WARN  [network.element.VpcVirtualRouterElement]
> (consoleproxy-1:null) Network Ntwk[204|Guest|6] is not associated with any
> VPC
> 2014-04-17 07:01:14,797 WARN  [network.element.VpcVirtualRouterElement]
> (consoleproxy-1:null) Network Ntwk[202|Control|3] is not associated with
> any VPC
> 2014-04-17 07:01:14,816 WARN  [network.element.VpcVirtualRouterElement]
> (consoleproxy-1:null) Network Ntwk[201|Management|2] is not associated with
> any VPC
> 2014-04-17 07:01:25,131 WARN  [xen.resource.CitrixResourceBase]
> (DirectAgent-317:null) Failed to program default network rules for s-6-VM
> 2014-04-17 07:02:23,503 WARN  [xen.resource.CitrixResourceBase]
> (DirectAgent-319:null) Failed to program default network rules for v-7-VM
> 2014-04-17 07:11:42,788 WARN  [storage.download.DownloadMonitorImpl]
> (catalina-exec-18:null) There is no secondary storage VM for secondary
> storage host nfs://172.16.96.10/secondary
> 2014-04-17 07:25:24,475 DEBUG [cloud.api.ApiServlet] (catalina-exec-2:null)
> Invalid paramemter in URL found. param: value=
> 2014-04-17 07:26:04,086 ERROR
> [cloud.cluster.ClusterServiceServletContainer] (Thread-14:null) Unexpected
> exception
> java.net.SocketException: Socket closed
> 2014-04-17 07:26:26,489 ERROR [cloud.cluster.ClusterManagerImpl]
> (main:null) Unable to ping management server at 172.16.96.10:9090 due to
> ConnectException
> java.net.ConnectException: Connection refused
> 2014-04-17 07:26:26,954 WARN  [storage.download.DownloadMonitorImpl]
> (main:null) Only realhostip.com ssl cert is supported, ignoring self-signed
> and other certs
> 2014-04-17 07:26:31,299 WARN  [cloud.cluster.ClusterManagerImpl]
> (Cluster-Notification-1:null) Notifying management server join event took
> 36 ms

I also see a other errors in the log file but lets first make sure
your network configuration is correct.

Regards.

--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
Bangalore - 560 055

Need Enterprise Grade Support for Apache CloudStack?
Our CloudStack Infrastructure 
Support<http://shapeblue.com/cloudstack-infrastructure-support/> offers the 
best 24/7 SLA for CloudStack Environments.

Apache CloudStack Bootcamp training courses

**NEW!** CloudStack 4.2.1 training<http://shapeblue.com/cloudstack-training/>
28th-29th May 2014, Bangalore. 
Classromm<http://shapeblue.com/cloudstack-training/>
16th-20th June 2014, Region A. Instructor led, 
On-line<http://shapeblue.com/cloudstack-training/>
23rd-27th June 2014, Region B. Instructor led, 
On-line<http://shapeblue.com/cloudstack-training/>
15th-20th September 2014, Region A. Instructor led, 
On-line<http://shapeblue.com/cloudstack-training/>
22nd-27th September 2014, Region B. Instructor led, 
On-line<http://shapeblue.com/cloudstack-training/>
1st-6th December 2014, Region A. Instructor led, 
On-line<http://shapeblue.com/cloudstack-training/>
8th-12th December 2014, Region B. Instructor led, 
On-line<http://shapeblue.com/cloudstack-training/>

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.

Reply via email to