[
https://issues.apache.org/jira/browse/CLOUDSTACK-1084?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Alena Prokharchyk resolved CLOUDSTACK-1084.
-------------------------------------------
Resolution: Duplicate
Duplicate of https://issues.apache.org/jira/browse/CLOUDSTACK-2761
> vpc static one to one nat failure
> ---------------------------------
>
> Key: CLOUDSTACK-1084
> URL: https://issues.apache.org/jira/browse/CLOUDSTACK-1084
> Project: CloudStack
> Issue Type: Bug
> Security Level: Public(Anyone can view this level - this is the
> default.)
> Components: VMware
> Affects Versions: 4.0.0
> Reporter: brandon arms
> Priority: Blocker
>
> static nat rule fails for vpc:
> acquire ip address log:
> 2013-01-29 14:34:05,584 DEBUG [cloud.network.NetworkManagerImpl]
> (catalina-exec-13:null) Associate IP address called by the user 6 account 6
> 2013-01-29 14:34:05,585 DEBUG [cloud.network.NetworkManagerImpl]
> (catalina-exec-13:null) Associate IP address lock acquired
> 2013-01-29 14:34:05,589 DEBUG [cloud.network.NetworkManagerImpl]
> (catalina-exec-13:null) Got 8.25.163.133 to assign for account 6 in zone 3
> 2013-01-29 14:34:05,602 DEBUG [cloud.network.NetworkManagerImpl]
> (catalina-exec-13:null) Releasing lock account Acct[6-barms]
> 2013-01-29 14:34:05,603 DEBUG [cloud.network.NetworkManagerImpl]
> (catalina-exec-13:null) Associate IP address lock released
> 2013-01-29 14:34:05,615 DEBUG [cloud.async.AsyncJobManagerImpl]
> (catalina-exec-13:null) submit async job-353, details: AsyncJobVO {id:353,
> userId: 6, accountId: 6, sessionKey: null, instanceType: IpAddress,
> instanceId: 17, cmd: com.cloud.api.commands.AssociateIPAddrCmd,
> cmdOriginator: null, cmdInfo:
> {"id":"17","response":"json","sessionkey":"c5ysvZL+Nxs2EwFefOsNuWL6/NY\u003d","ctxUserId":"6","_":"1359488045538","ctxAccountId":"6","vpcid":"1606e883-6750-42be-b42b-663cb56dba46","ctxStartEventId":"1519"},
> cmdVersion: 0, callbackType: 0, callbackAddress: null, status: 0,
> processStatus: 0, resultCode: 0, result: null, initMsid: 143316583244,
> completeMsid: null, lastUpdated: null, lastPolled: null, created: null}
> 2013-01-29 14:34:05,618 DEBUG [cloud.async.AsyncJobManagerImpl]
> (Job-Executor-12:job-353) Executing com.cloud.api.commands.AssociateIPAddrCmd
> for job-353
> 2013-01-29 14:34:05,628 DEBUG [network.vpc.VpcManagerImpl]
> (Job-Executor-12:job-353) Associating ip Ip[8.25.163.133-3] to vpc [VPC
> [8-Tenant1-VPC]
> 2013-01-29 14:34:05,638 DEBUG [network.vpc.VpcManagerImpl]
> (Job-Executor-12:job-353) Successfully assigned ip Ip[8.25.163.133-3] to vpc
> [VPC [8-Tenant1-VPC]
> 2013-01-29 14:34:05,644 DEBUG [cloud.async.AsyncJobManagerImpl]
> (Job-Executor-12:job-353) Complete async job-353, jobStatus: 1, resultCode:
> 0, result: com.cloud.api.response.IPAddressResponse@3e8d1fbf
> 2013-01-29 14:34:05,649 DEBUG [cloud.async.AsyncJobManagerImpl]
> (Job-Executor-12:job-353) Done executing
> com.cloud.api.commands.AssociateIPAddrCmd for job-353
> 2013-01-29 14:34:10,653 DEBUG [cloud.async.AsyncJobManagerImpl]
> (catalina-exec-23:null) Async job-353 completed
> enable static nat (failure):
> 2013-01-29 14:36:13,741 DEBUG [network.rules.RulesManagerImpl]
> (catalina-exec-3:null) The ip is not associated with the VPC network id=238,
> so assigning
> 2013-01-29 14:36:13,745 DEBUG [cloud.network.NetworkManagerImpl]
> (catalina-exec-3:null) Associating ip Ip[8.25.163.133-3] to network
> Ntwk[238|Guest|12]
> 2013-01-29 14:36:13,752 DEBUG [cloud.network.NetworkManagerImpl]
> (catalina-exec-3:null) Successfully associated ip address 8.25.163.133 to
> network Ntwk[238|Guest|12]
> 2013-01-29 14:36:13,770 DEBUG
> [network.router.VirtualNetworkApplianceManagerImpl] (catalina-exec-3:null)
> Applying vpc ip association in network Ntwk[238|Guest|12]
> 2013-01-29 14:36:13,786 DEBUG [agent.transport.Request]
> (catalina-exec-3:null) Seq 10-328139827: Sending { Cmd , MgmtId:
> 143316583244, via: 10, Ver: v1, Flags: 100001,
> [{"routing.IpAssocVpcCommand":{"ipAddresses":[{"accountId":6,"publicIp":"8.25.163.133","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"500","vlanGateway":"8.25.163.129","vlanNetmask":"255.255.255.240","vifMacAddress":"06:4b:ce:00:00:1c","networkRate":200,"trafficType":"Public","networkName":"vSwitch1"}],"accessDetails":{"router.guest.ip":"8.25.163.131","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}}]
> }
> 2013-01-29 14:36:13,786 DEBUG [agent.transport.Request]
> (catalina-exec-3:null) Seq 10-328139827: Executing: { Cmd , MgmtId:
> 143316583244, via: 10, Ver: v1, Flags: 100001,
> [{"routing.IpAssocVpcCommand":{"ipAddresses":[{"accountId":6,"publicIp":"8.25.163.133","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"500","vlanGateway":"8.25.163.129","vlanNetmask":"255.255.255.240","vifMacAddress":"06:4b:ce:00:00:1c","networkRate":200,"trafficType":"Public","networkName":"vSwitch1"}],"accessDetails":{"router.guest.ip":"8.25.163.131","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}}]
> }
> 2013-01-29 14:36:13,786 DEBUG [agent.manager.DirectAgentAttache]
> (DirectAgent-409:null) Seq 10-328139827: Executing request
> 2013-01-29 14:36:13,787 INFO [vmware.resource.VmwareResource]
> (DirectAgent-409:172.31.200.140) Executing resource IpAssocVpcCommand
> {"ipAddresses":[{"accountId":6,"publicIp":"8.25.163.133","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"500","vlanGateway":"8.25.163.129","vlanNetmask":"255.255.255.240","vifMacAddress":"06:4b:ce:00:00:1c","networkRate":200,"trafficType":"Public","networkName":"vSwitch1"}],"accessDetails":{"router.guest.ip":"8.25.163.131","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}
> 2013-01-29 14:36:13,787 DEBUG [vmware.resource.VmwareResource]
> (DirectAgent-409:172.31.200.140) Use router's private IP for SSH control. IP
> : 172.31.200.166
> 2013-01-29 14:36:13,787 INFO [vmware.resource.VmwareResource]
> (DirectAgent-409:172.31.200.140) Executing resource assignVPCPublicIpAddress.
> domrName: r-64-VM, routerIp: 172.31.200.166, ip:
> {"accountId":6,"publicIp":"8.25.163.133","sourceNat":false,"add":true,"oneToOneNat":true,"firstIP":false,"vlanId":"500","vlanGateway":"8.25.163.129","vlanNetmask":"255.255.255.240","vifMacAddress":"06:4b:ce:00:00:1c","networkRate":200,"trafficType":"Public","networkName":"vSwitch1"}
> 2013-01-29 14:36:13,787 INFO [vmware.resource.VmwareResource]
> (DirectAgent-409:172.31.200.140) findRouterEthDeviceIndex. mac:
> 06:4b:ce:00:00:1c
> 2013-01-29 14:36:15,002 DEBUG [vmware.resource.VmwareResource]
> (DirectAgent-409:172.31.200.140) Run domr script ip address show eth0 | grep
> link/ether | sed -e 's/^[ ]*//' | cut -d' ' -f2
> 2013-01-29 14:36:16,235 DEBUG [vmware.resource.VmwareResource]
> (DirectAgent-409:172.31.200.140) result: true, output: 02:00:21:c2:00:18
> 2013-01-29 14:36:16,253 DEBUG [vmware.resource.VmwareResource]
> (DirectAgent-409:172.31.200.140) Run domr script ip address show eth1 | grep
> link/ether | sed -e 's/^[ ]*//' | cut -d' ' -f2
> 2013-01-29 14:36:17,424 DEBUG [vmware.resource.VmwareResource]
> (DirectAgent-409:172.31.200.140) result: true, output: 06:4b:ce:00:00:1c
> 2013-01-29 14:36:18,674 DEBUG [agent.manager.DirectAgentAttache]
> (DirectAgent-409:null) Seq 10-328139827: Response Received:
> 2013-01-29 14:36:18,675 DEBUG [agent.transport.Request]
> (DirectAgent-409:null) Seq 10-328139827: Processing: { Ans: , MgmtId:
> 143316583244, via: 10, Ver: v1, Flags: 0,
> [{"routing.IpAssocAnswer":{"results":["8.25.163.133 -
> success"],"result":true,"wait":0}}] }
> 2013-01-29 14:36:18,675 DEBUG [agent.transport.Request]
> (catalina-exec-3:null) Seq 10-328139827: Received: { Ans: , MgmtId:
> 143316583244, via: 10, Ver: v1, Flags: 0, { IpAssocAnswer } }
> 2013-01-29 14:36:18,680 DEBUG
> [network.router.VirtualNetworkApplianceManagerImpl] (catalina-exec-3:null)
> Applying static nat rules in network Ntwk[238|Guest|12]
> 2013-01-29 14:36:18,689 DEBUG [agent.transport.Request]
> (catalina-exec-3:null) Seq 10-328139828: Sending { Cmd , MgmtId:
> 143316583244, via: 10, Ver: v1, Flags: 100001,
> [{"routing.SetStaticNatRulesCommand":{"rules":[{"dstIp":"10.1.201.187","id":0,"srcIp":"8.25.163.133","revoked":false,"alreadyAdded":false,"purpose":"StaticNat","icmpType":0,"icmpCode":0}],"vpcId":8,"accessDetails":{"router.guest.ip":"10.1.201.129","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}}]
> }
> 2013-01-29 14:36:18,689 DEBUG [agent.transport.Request]
> (catalina-exec-3:null) Seq 10-328139828: Executing: { Cmd , MgmtId:
> 143316583244, via: 10, Ver: v1, Flags: 100001,
> [{"routing.SetStaticNatRulesCommand":{"rules":[{"dstIp":"10.1.201.187","id":0,"srcIp":"8.25.163.133","revoked":false,"alreadyAdded":false,"purpose":"StaticNat","icmpType":0,"icmpCode":0}],"vpcId":8,"accessDetails":{"router.guest.ip":"10.1.201.129","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}}]
> }
> 2013-01-29 14:36:18,689 DEBUG [agent.manager.DirectAgentAttache]
> (DirectAgent-138:null) Seq 10-328139828: Executing request
> 2013-01-29 14:36:18,690 INFO [vmware.resource.VmwareResource]
> (DirectAgent-138:172.31.200.140) Executing resource SetFirewallRuleCommand:
> {"rules":[{"dstIp":"10.1.201.187","id":0,"srcIp":"8.25.163.133","revoked":false,"alreadyAdded":false,"purpose":"StaticNat","icmpType":0,"icmpCode":0}],"vpcId":8,"accessDetails":{"router.guest.ip":"10.1.201.129","zone.network.type":"Advanced","router.ip":"172.31.200.166","router.name":"r-64-VM"},"wait":0}
> 2013-01-29 14:36:18,691 DEBUG [vmware.resource.VmwareResource]
> (DirectAgent-138:172.31.200.140) Use router's private IP for SSH control. IP
> : 172.31.200.166
> 2013-01-29 14:36:19,997 ERROR [utils.ssh.SshHelper]
> (DirectAgent-138:172.31.200.140) SSH execution of command /root/firewall.sh
> -A -l 8.25.163.133 -r 10.1.201.187 -d 0:0 -G has an error status code in
> return. result output: Bad argument `8.25.163.133'
> Try `iptables -h' or 'iptables --help' for more information.
> Bad argument `8.25.163.133'
> Try `iptables -h' or 'iptables --help' for more information.
> iptables v1.4.8: option `--set-mark' requires an argument
> Try `iptables -h' or 'iptables --help' for more information.
> iptables: No chain/target/match by that name.
> Bad argument `8.25.163.133'
> Try `iptables -h' or 'iptables --help' for more information.
> Bad argument `eth0'
> Try `iptables -h' or 'iptables --help' for more information.
> Bad argument `8.25.163.133'
> Try `iptables -h' or 'iptables --help' for more information.
> iptables: No chain/target/match by that name.
> iptables: No chain/target/match by that name.
> Bad argument `8.25.163.133'
> Try `iptables -h' or 'iptables --help' for more information.
> 2013-01-29 14:36:20,001 DEBUG [vmware.resource.VmwareResource]
> (DirectAgent-138:172.31.200.140) Executing script on domain router
> 172.31.200.166: /root/firewall.sh -A -l 8.25.163.133 -r 10.1.201.187 -d 0:0
> -G
> 2013-01-29 14:36:20,001 ERROR [vmware.resource.VmwareResource]
> (DirectAgent-138:172.31.200.140) SetStaticNatRulesCommand failure on setting
> one rule. args: -A -l 8.25.163.133 -r 10.1.201.187 -d 0:0 -G
> 2013-01-29 14:36:20,005 DEBUG [agent.manager.DirectAgentAttache]
> (DirectAgent-138:null) Seq 10-328139828: Response Received:
> 2013-01-29 14:36:20,005 DEBUG [agent.transport.Request]
> (DirectAgent-138:null) Seq 10-328139828: Processing: { Ans: , MgmtId:
> 143316583244, via: 10, Ver: v1, Flags: 0,
> [{"routing.SetStaticNatRulesAnswer":{"results":["Failed"],"result":false,"wait":0}}]
> }
> 2013-01-29 14:36:20,005 DEBUG [agent.transport.Request]
> (catalina-exec-3:null) Seq 10-328139828: Received: { Ans: , MgmtId:
> 143316583244, via: 10, Ver: v1, Flags: 0, { SetStaticNatRulesAnswer } }
> 2013-01-29 14:36:20,006 WARN [network.rules.RulesManagerImpl]
> (catalina-exec-3:null) Failed to create static nat rule due to
> com.cloud.exception.ResourceUnavailableException: Resource [DataCenter:3] is
> unreachable: Unable to apply static nat rules on router
> at
> com.cloud.network.router.VirtualNetworkApplianceManagerImpl.applyRules(VirtualNetworkApplianceManagerImpl.java:3135)
> at
> com.cloud.network.router.VirtualNetworkApplianceManagerImpl.applyStaticNats(VirtualNetworkApplianceManagerImpl.java:3183)
> at
> com.cloud.network.element.VirtualRouterElement.applyStaticNats(VirtualRouterElement.java:604)
> at
> com.cloud.network.NetworkManagerImpl.applyStaticNats(NetworkManagerImpl.java:4937)
> at
> com.cloud.network.rules.RulesManagerImpl.applyStaticNatForIp(RulesManagerImpl.java:1283)
> at
> com.cloud.network.rules.RulesManagerImpl.enableStaticNat(RulesManagerImpl.java:472)
> at
> com.cloud.event.ActionEventCallback.intercept(ActionEventCallback.java:36)
> at
> com.cloud.api.commands.EnableStaticNatCmd.execute(EnableStaticNatCmd.java:111)
> at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:138)
> at com.cloud.api.ApiServer.queueCommand(ApiServer.java:543)
> at com.cloud.api.ApiServer.handleRequest(ApiServer.java:422)
> at com.cloud.api.ApiServlet.processRequest(ApiServlet.java:304)
> at com.cloud.api.ApiServlet.doGet(ApiServlet.java:63)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
> at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
> at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
> at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> at
> org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:555)
> at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
> at
> org.apache.coyote.http11.Http11NioProcessor.process(Http11NioProcessor.java:889)
> at
> org.apache.coyote.http11.Http11NioProtocol$Http11ConnectionHandler.process(Http11NioProtocol.java:721)
> at
> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:2268)
> at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
> at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
> at java.lang.Thread.run(Thread.java:679)
> 2013-01-29 14:36:20,009 WARN [network.rules.RulesManagerImpl]
> (catalina-exec-3:null) Failed to enable static nat rule for ip address 17 on
> the backend
> 2013-01-29 14:36:20,014 DEBUG [network.vpc.VpcManagerImpl]
> (catalina-exec-3:null) Releasing VPC ip address Ip[8.25.163.133-3] from vpc
> network id=238
> 2013-01-29 14:36:20,036 DEBUG [network.vpc.VpcManagerImpl]
> (catalina-exec-3:null) IP address Ip[8.25.163.133-3] is no longer associated
> with the network inside vpc id=8
> 2013-01-29 14:36:20,036 DEBUG [network.vpc.VpcManagerImpl]
> (catalina-exec-3:null) Successfully released VPC ip address
> Ip[8.25.163.133-3] back to VPC pool
> 2013-01-29 14:36:20,039 WARN [cloud.api.ApiDispatcher]
> (catalina-exec-3:null) class com.cloud.api.ServerApiException : Failed to
> enable static nat
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
