Hi Rob,

Can you share the network config of your kvm host ?

-Wei

On Monday, 8 May 2023, Ron Bramlett <ron.braml...@ascensus.com.invalid>
wrote:

> Hello Wei. Thank you for your suggestion. I moved the second KVM nic to a
> different subnet and reprovisioned the Zone with new public and guest IPs.
> However, the system VMs still cannot access the network.
>
> Is there any sysctl settings that could be blocking this? The KVM
> installation guide and CloudStack guide don’t mention any changes to sysctl
> settings.
>
> root@s-6-VM:~# /usr/local/cloud/systemvm/ssvm-check.sh
> ================================================
> First DNS server is  172.18.5.71
> PING 172.18.5.71 (172.18.5.71): 56 data bytes
> --- 172.18.5.71 ping statistics ---
> 2 packets transmitted, 0 packets received, 100% packet loss
> WARNING: cannot ping DNS server
> route follows
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> 0.0.0.0         172.18.8.1      0.0.0.0         UG    0      0        0
> eth2
> 10.120.120.0    0.0.0.0         255.255.252.0   U     0      0        0
> eth1
> 169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0
> eth0
> 172.18.5.71     10.120.120.1    255.255.255.255 UGH   0      0        0
> eth1
> 172.18.8.0      0.0.0.0         255.255.252.0   U     0      0        0
> eth2
> ================================================
> ERROR: DNS not resolving cloudstack.apache.org
> resolv.conf follows
> nameserver 172.18.5.71
> nameserver 172.18.5.71
> nameserver 172.18.5.72
> root@s-6-VM:~#
> root@s-6-VM:~# ip addr
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group
> default qlen 1000
>     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>     inet 127.0.0.1/8 scope host lo
>        valid_lft forever preferred_lft forever
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP group default qlen 1000
>     link/ether 0e:00:a9:fe:9f:a2 brd ff:ff:ff:ff:ff:ff
>     altname enp0s3
>     altname ens3
>     inet 169.254.159.162/16 brd 169.254.255.255 scope global eth0
>        valid_lft forever preferred_lft forever
> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP group default qlen 1000
>     link/ether 1e:00:b8:00:00:05 brd ff:ff:ff:ff:ff:ff
>     altname enp0s4
>     altname ens4
>     inet 10.120.123.163/22 brd 10.120.123.255 scope global eth1
>        valid_lft forever preferred_lft forever
> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP group default qlen 1000
>     link/ether 1e:00:39:00:00:07 brd ff:ff:ff:ff:ff:ff
>     altname enp0s5
>     altname ens5
>     inet 172.18.10.221/22 brd 172.18.11.255 scope global eth2
>        valid_lft forever preferred_lft forever
> root@s-6-VM:~#
>
> From: Wei ZHOU <ustcweiz...@gmail.com>
> Sent: Tuesday, May 2, 2023 1:29 PM
> To: users@cloudstack.apache.org
> Subject: [EXTERNAL] Re: SSVM agent state greyed out in web UI
>
> CAUTION: This email originated from outside of the organization. Do not
> follow guidance, click links, or open attachments unless you recognize the
> sender and know the content is safe.
>
> Hi,
>
> In ssvm, the eth1 has ip
> 10.120.123.166/22<http://10.120.123.166/22>, eth2 has ip 10.120.123.160/22
> <http://10.120.123.160/22>
> They are in same subnet, but.. it seems eth1 is on cloudbr0 and eth2 is on
> cloudbr1.
>
> I think they should use ips in different subnet, or on same bridge (network
> traffic label)
>
> -Wei
>
> Disclaimer
>
> The information contained in this communication from the sender is
> confidential. It is intended solely for use by the recipient and others
> authorized to receive it. If you are not the recipient, you are hereby
> notified that any disclosure, copying, distribution or taking action in
> relation of the contents of this information is strictly prohibited and may
> be unlawful.
>
> This email has been scanned for viruses and malware, and may have been
> automatically archived by Mimecast Ltd, an innovator in Software as a
> Service (SaaS) for business. Providing a safer and more useful place for
> your human generated data. Specializing in; Security, archiving and
> compliance. To find out more visit the Mimecast website.
>

Reply via email to