VM在DevStack中的可见性

我刚刚在一台IP为192.168.249.1的虚拟机上configuration了我的DevStack环境。 我希望那个实例生成在我的私有公司networking中可以访问的虚拟机。 因此,我configuration了DevStack从它们生成的IP范围:

 FLOATING_RANGE=192.168.254.0/24 

虚拟机已正确创build,浮动IP正确分配给它们。 我试图在admin项目中创build一个实例,并将其与IP 192.168.254.1关联。

然后我修改了default安全组,添加了以下规则:

 nova secgroup-add-rule default tcp 22 22 0.0.0.0/0 nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0 

现在,我可以通过SSH从DevStack主机( 192.168.249.1 )ping和访问虚拟机。 虚拟机已正确configuration:

 $ nova show hello +--------------------------------------+----------------------------------------------------------------+ | Property | Value | +--------------------------------------+----------------------------------------------------------------+ | OS-DCF:diskConfig | AUTO | | OS-EXT-AZ:availability_zone | nova | | OS-EXT-STS:power_state | 1 | | OS-EXT-STS:task_state | - | | OS-EXT-STS:vm_state | active | | OS-SRV-USG:launched_at | 2016-07-27T11:53:40.000000 | | OS-SRV-USG:terminated_at | - | | accessIPv4 | | | accessIPv6 | | | config_drive | True | | created | 2016-07-27T11:53:17Z | | description | hello | | flavor | m1.tiny (1) | | hostId | 76e96a3eec1a4472c12b7d4b1ce11737420b17a0480d760f77ab7b5a | | id | 189b2423-5b11-4f6d-bfe5-ff03649a1b74 | | image | cirros-0.3.4-x86_64-uec (63025b58-4c4f-4352-aeb7-378f62e6bccc) | | key_name | - | | locked | False | | metadata | {} | | name | hello | | os-extended-volumes:volumes_attached | [] | | private network | 10.0.0.2, 192.168.254.1 | | progress | 0 | | security_groups | default | | status | ACTIVE | | tags | [] | | tenant_id | 36a66b65bd094a538370f4a1e3d8d3e6 | | updated | 2016-07-27T11:53:40Z | | user_id | 554fcfc91ba34ca2b1262338a9f93fe9 | +--------------------------------------+----------------------------------------------------------------+ 

正如你所看到的,虚拟机与两个IP(一个固定的和一个浮动的)相关联,正如我上面提到的那样,浮动是来自DevStack主机的良好forms和“可ping”的。

但是,我现在试图从我的电脑(IP: 192.168.252.146 )ping虚拟机,但我无法达到它(无论是通过SSH或ping)。 但是,虚拟机可以ping通8.8.8.8

任何想法为什么会发生这种情况,或者我可以检查什么是错的?

谢谢。


如果需要,这是活动服务列表:

 +----+------------------+---------------+----------+---------+-------+----------------------------+-----------------+ | Id | Binary | Host | Zone | Status | State | Updated_at | Disabled Reason | +----+------------------+---------------+----------+---------+-------+----------------------------+-----------------+ | 3 | nova-conductor | pc | internal | enabled | up | 2016-07-28T12:30:44.000000 | - | | 5 | nova-network | pc | internal | enabled | up | 2016-07-27T13:41:46.000000 | - | | 6 | nova-scheduler | pc | internal | enabled | up | 2016-07-28T12:30:43.000000 | - | | 7 | nova-consoleauth | pc | internal | enabled | up | 2016-07-28T12:30:47.000000 | - | | 8 | nova-compute | pc | nova | enabled | up | 2016-07-28T12:30:49.000000 | - | +----+------------------+---------------+----------+---------+-------+----------------------------+-----------------+