instance - 无法在 LAN 上访问 openstack 实例

Question

我已经使用 devstack 设置了单机 openstack。我的实例在机器上运行。

openstack machine ip 192.168.2.32

instance machine ip 10.0.0.2 and 172.24.4.1

我可以从 openstack 机器 ping 通 172.24.4.1。但我无法从个人计算机 ping 这台机器。并且无法访问实例。怎么解决呢？

IP转发

 /proc/sys/net/ipv4/ip_forward 1

/etc/nova/nova.conf

flat_interface = em1
flat_network_bridge = br100
vlan_interface = em1
public_interface = br100
network_manager = nova.network.manager.FlatDHCPManager
firewall_driver = nova.virt.libvirt.firewall.IptablesFirewallDriver
compute_driver = libvirt.LibvirtDriver
default_ephemeral_format = ext4...

ifconfig

br100     Link encap:Ethernet  HWaddr 00:26:55:4b:46:0a  
          inet addr:10.0.0.1  Bcast:10.0.0.255  Mask:255.255.255.0
          inet6 addr: fe80::707a:83ff:fe0f:4db0/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:62087 errors:0 dropped:0 overruns:0 frame:0
          TX packets:38260 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:71936261 (71.9 MB)  TX bytes:5377931 (5.3 MB)

em1       Link encap:Ethernet  HWaddr 00:26:55:4b:46:0a  
          inet6 addr: fe80::226:55ff:fe4b:460a/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:63127 errors:0 dropped:0 overruns:0 frame:0
          TX packets:39439 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:73159657 (73.1 MB)  TX bytes:6162268 (6.1 MB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:163787 errors:0 dropped:0 overruns:0 frame:0
          TX packets:163787 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:495519545 (495.5 MB)  TX bytes:495519545 (495.5 MB)

virbr0    Link encap:Ethernet  HWaddr de:30:60:02:bc:dc  
          inet addr:192.168.122.1  Bcast:192.168.122.255  Mask:255.255.255.0
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

vnet0     Link encap:Ethernet  HWaddr fe:16:3e:11:ee:00  
          inet6 addr: fe80::fc16:3eff:fe11:ee00/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:15 errors:0 dropped:0 overruns:0 frame:0
          TX packets:474 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:500 
          RX bytes:1581 (1.5 KB)  TX bytes:74117 (74.1 KB)

请帮忙。谢谢

Answer 1

默认情况下，Ping 被阻止。您应该在安全组中允许 ping。

1)首先找出哪个是安全组

单击实例名称 -> 安全组 (如果您没有配置任何内容，这将是默认)

2) 转到计算 -> 访问和安全 选择安全组->管理规则 3)点击添加规则

规则 - 所有 ICMP 方向 - 入口

然后点击“添加” 您将能够 ping 到分配给实例的 float IP。