Hi,

In ssvm, the eth1 has ip
10.120.123.166/22, eth2 has ip 10.120.123.160/22
They are in same subnet, but.. it seems eth1 is on cloudbr0 and eth2 is on
cloudbr1.

I think they should use ips in different subnet, or on same bridge (network
traffic label)

-Wei

On Monday, 1 May 2023, Ron Bramlett <ron.braml...@ascensus.com.invalid>
wrote:

> Hello,
>
> Quick overview:
> I've been following the installation tutorial at https://docs.cloudstack.
> apache.org/en/latest/installguide/index.html to install a basic instance
> for initial evaluation.  My issue is that after creating the Zone in the
> web UI, the Agent State for the secondarystoragevm and consoleproxy is
> greyed out. The agent state is Running for both. Following the
> troubleshooting guide, it appears that the system VMs are not able to
> connect to the local network through the hosts bridged interface. The
> hypervisor host is RHEL 8.7 with KVM.
>
>
> Details:
> Have 3 VMs: One running the management server and mysql database, the
> second is the primary and secondary NFS server, and the third is the
> RHEL 8.7 KVM hypervisor host.  Followed the installation instructions at
> http://docs.cloudstack.apache.org/en/latest/installguide/
> hypervisor/kvm.html to set up the KVM hypervisor host. Hypervisor host
> has 2 NICs: first one configured for cloudbr0 and the management interface,
> second one configured for cloudbr1 and the guest and public interfaces.
> Firewalls on all 3 VMs have been disabled for testing. All 3 VMs are on the
> same subnet.
>
> When adding the Zone, I selected Core zone, Advanced core zone type, added
> 2 physical networks with VLAN isolation method (first one configured with
> management traffic over cloudbr0, second one with guest and public both on
> cloudbr1).  For the public traffic, the gateway is 10.120.120.1, netmask
> 255.255.252.0, start IP 10.120.123.159, end IP 10.120.123.163, and VLAN
> left blank (The local network doesn't require VLANs).  For the pod, the
> reserved gateway is 10.120.120.1, netmask 255.255.252.0, reserved system
> start IP 10.120.123.164, reserved system end IP 10.120.123.168.
>
> When I connect into the SSVM and run /usr/local/cloud/systemvm/ssvm-check.sh,
> I get:
> root@s-2-VM:~# /usr/local/cloud/systemvm/ssvm-check.sh
> ================================================
> First DNS server is  172.18.5.71
> PING 172.18.5.71 (172.18.5.71): 56 data bytes
> --- 172.18.5.71 ping statistics ---
> 2 packets transmitted, 0 packets received, 100% packet loss
> WARNING: cannot ping DNS server
> route follows
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> 0.0.0.0         10.120.120.1    0.0.0.0         UG    0      0        0
> eth2
> 10.120.120.0    0.0.0.0         255.255.252.0   U     0      0        0
> eth1
> 10.120.120.0    0.0.0.0         255.255.252.0   U     0      0        0
> eth2
> 169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0
> eth0
> 172.18.5.71     10.120.120.1    255.255.255.255 UGH   0      0        0
> eth1
> ================================================
> ERROR: DNS not resolving cloudstack.apache.org
> resolv.conf follows
> nameserver 172.18.5.71
> nameserver 172.18.5.71
> nameserver 172.18.5.72
>
> root@s-2-VM:~# ip addr
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group
> default qlen 1000
>     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>     inet 127.0.0.1/8 scope host lo
>        valid_lft forever preferred_lft forever
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP group default qlen 1000
>     link/ether 0e:00:a9:fe:a2:f8 brd ff:ff:ff:ff:ff:ff
>     altname enp0s3
>     altname ens3
>     inet 169.254.162.248/16 brd 169.254.255.255 scope global eth0
>        valid_lft forever preferred_lft forever
> 3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP group default qlen 1000
>     link/ether 1e:00:9d:00:00:03 brd ff:ff:ff:ff:ff:ff
>     altname enp0s4
>     altname ens4
>     inet 10.120.123.166/22 brd 10.120.123.255 scope global eth1
>        valid_lft forever preferred_lft forever
> 4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
> state UP group default qlen 1000
>     link/ether 1e:00:8f:00:00:07 brd ff:ff:ff:ff:ff:ff
>     altname enp0s5
>     altname ens5
>     inet 10.120.123.160/22 brd 10.120.123.255 scope global eth2
>        valid_lft forever preferred_lft forever
>
>
> On the KVM hypervisor host on which the SSVM is running:
> $ brctl show
> bridge name     bridge id               STP enabled     interfaces
> cloud0          8000.fe00a9fe4377       no              vnet0
>                                                         vnet3
> cloudbr0                8000.00505688729b       yes             ens192
>                                                         vnet1
>                                                         vnet4
> cloudbr1                8000.0050568829ca       yes             ens224
>                                                         vnet2
>                                                         vnet5
>
>
> The management server log doesn't log any errors when deploying the system
> VMs.
> The hypervisor host agent log shows the following:
> 2023-05-01 09:24:31,974 WARN  [kvm.resource.LibvirtKvmAgentHook]
> (agentRequest-Handler-3:null) (logid:8bbb4904) Groovy script
> '/etc/cloudstack/agent/hooks/libvirt-vm-state-change.groovy' is not
> available. Transformations will not be applied.
> 2023-05-01 09:24:31,974 WARN  [kvm.resource.LibvirtKvmAgentHook]
> (agentRequest-Handler-3:null) (logid:8bbb4904) Groovy scripting engine is
> not initialized. Data transformation skipped.
>
> Thanks for any guidance provided.
>
> Disclaimer
>
> The information contained in this communication from the sender is
> confidential. It is intended solely for use by the recipient and others
> authorized to receive it. If you are not the recipient, you are hereby
> notified that any disclosure, copying, distribution or taking action in
> relation of the contents of this information is strictly prohibited and may
> be unlawful.
>
> This email has been scanned for viruses and malware, and may have been
> automatically archived by Mimecast Ltd, an innovator in Software as a
> Service (SaaS) for business. Providing a safer and more useful place for
> your human generated data. Specializing in; Security, archiving and
> compliance. To find out more visit the Mimecast website.
>

Reply via email to