Hello Wei. Thank you for your suggestion. I moved the second KVM nic to a 
different subnet and reprovisioned the Zone with new public and guest IPs. 
However, the system VMs still cannot access the network.

Is there any sysctl settings that could be blocking this? The KVM installation 
guide and CloudStack guide don’t mention any changes to sysctl settings.

root@s-6-VM:~# /usr/local/cloud/systemvm/ssvm-check.sh
================================================
First DNS server is  172.18.5.71
PING 172.18.5.71 (172.18.5.71): 56 data bytes
--- 172.18.5.71 ping statistics ---
2 packets transmitted, 0 packets received, 100% packet loss
WARNING: cannot ping DNS server
route follows
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         172.18.8.1      0.0.0.0         UG    0      0        0 eth2
10.120.120.0    0.0.0.0         255.255.252.0   U     0      0        0 eth1
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth0
172.18.5.71     10.120.120.1    255.255.255.255 UGH   0      0        0 eth1
172.18.8.0      0.0.0.0         255.255.252.0   U     0      0        0 eth2
================================================
ERROR: DNS not resolving cloudstack.apache.org
resolv.conf follows
nameserver 172.18.5.71
nameserver 172.18.5.71
nameserver 172.18.5.72
root@s-6-VM:~#
root@s-6-VM:~# ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group 
default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP 
group default qlen 1000
    link/ether 0e:00:a9:fe:9f:a2 brd ff:ff:ff:ff:ff:ff
    altname enp0s3
    altname ens3
    inet 169.254.159.162/16 brd 169.254.255.255 scope global eth0
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP 
group default qlen 1000
    link/ether 1e:00:b8:00:00:05 brd ff:ff:ff:ff:ff:ff
    altname enp0s4
    altname ens4
    inet 10.120.123.163/22 brd 10.120.123.255 scope global eth1
       valid_lft forever preferred_lft forever
4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP 
group default qlen 1000
    link/ether 1e:00:39:00:00:07 brd ff:ff:ff:ff:ff:ff
    altname enp0s5
    altname ens5
    inet 172.18.10.221/22 brd 172.18.11.255 scope global eth2
       valid_lft forever preferred_lft forever
root@s-6-VM:~#

From: Wei ZHOU <ustcweiz...@gmail.com>
Sent: Tuesday, May 2, 2023 1:29 PM
To: users@cloudstack.apache.org
Subject: [EXTERNAL] Re: SSVM agent state greyed out in web UI

CAUTION: This email originated from outside of the organization. Do not follow 
guidance, click links, or open attachments unless you recognize the sender and 
know the content is safe.

Hi,

In ssvm, the eth1 has ip
10.120.123.166/22<http://10.120.123.166/22>, eth2 has ip 
10.120.123.160/22<http://10.120.123.160/22>
They are in same subnet, but.. it seems eth1 is on cloudbr0 and eth2 is on
cloudbr1.

I think they should use ips in different subnet, or on same bridge (network
traffic label)

-Wei

Disclaimer

The information contained in this communication from the sender is 
confidential. It is intended solely for use by the recipient and others 
authorized to receive it. If you are not the recipient, you are hereby notified 
that any disclosure, copying, distribution or taking action in relation of the 
contents of this information is strictly prohibited and may be unlawful.

This email has been scanned for viruses and malware, and may have been 
automatically archived by Mimecast Ltd, an innovator in Software as a Service 
(SaaS) for business. Providing a safer and more useful place for your human 
generated data. Specializing in; Security, archiving and compliance. To find 
out more visit the Mimecast website.

Reply via email to