<div dir="ltr"><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div>Julian,<br></div>Lets try a more systematic approach (similar to what Donny suggests):<br><br></div>Please disable your arp script, and reproduce the situation where your vm cannot connect to the outside.<br></div><div>It will be also a good idea to have the failing machine be the only powered on machine connected to the network (bridge).<br></div><div><br></div>* from the machine os run a ping to a pingable destination outside of your network (8.8.8.8?)<br></div>* run tcpdump on the hypervisor on several interfaces:<br></div> * the vm tap device (vnet0? vnet1?)<br></div> * the vm network bridge device (hosting?), where the tap device is attached to. This should be visible via brctl.<br></div> * the vlan device underneath the bridge (this one should have a name like 'eno1.50' where eno1 is the physical nic and 50 is the vlan tag)<br></div> * the physical device (the ethernet nic)<br></div><br>The tcpdump command requires root privileges and looks like this: "sudo tcpdump -n -i <device_name> icmp or arp"<br><br></div>What I assume we will see are only icmp requests (pings) and no icmp replies (pongs). There might be also be only arp requests and<br>no arp replies.<br>What I am interested at is the arp broadcasts, as the vm should broadcast an arp request (who-is <my_gateway_ip>).<br></div></div>My first guess is that is no response or there is one but the vm cannot hear it. This is why I used the arp filter in the tcpdump command.<br><br></div>This should shed some light on where the problem is and in which layer. find out where the traffic is not forwarded.<br><br></div>Also, when you locate the point of failure, try and wait for the traffic to 'suddenly work' as you said and then figure out what was changed.<br><br></div>We would love to see the dumps and coontinue to help.<br><br></div>Thanks,<br></div>Ido<br><div><div><div><div><div><br></div></div></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 8, 2015 at 7:29 PM, Julián Tete <span dir="ltr"><<a href="mailto:danteconrad14@gmail.com" target="_blank">danteconrad14@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div><div><div><div>I found the reason of my Problem: the virtual machines can't write the ARP table ¡¡¿?!!<br><br></div>When I manually use the command:<br><br></div>arp -s 192.168.XXX.XX 00:09:XX:XX:XX:XX<br><br></div>I can reach the gateway<br><br></div>I can't reach anything from my net segment but i can reach Internet (Double ¡¡¿?!!)<br><br></div>For the moment I wrote a script, but is awful to do this.<br><br></div>Any idea ?<br><br></div>Thanks in advance :)<br></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">2015-07-10 11:26 GMT-05:00 Julián Tete <span dir="ltr"><<a href="mailto:danteconrad14@gmail.com" target="_blank">danteconrad14@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div style="display:inline-block"><div><span></span></div></div><div><div><span>Perhaps</span> <span>us are</span> <span>affected by</span> the following error :<br></div><span lang="en"><span><br><a href="http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04267968" target="_blank">http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04267968</a><br><br></span></span><span lang="en"><span>I will keep you</span> <span>informed<br><br></span></span></div><div><span lang="en"><span>Thanks Friends<br></span></span></div></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">2015-07-06 12:06 GMT-05:00 Julián Tete <span dir="ltr"><<a href="mailto:danteconrad14@gmail.com" target="_blank">danteconrad14@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Friends of oVirt<br><br>This the data required:<br><br>I have a HP Enclosure with a HP SAN.<br>I can't change the net settings in the switch because we have VMware Virtual Machines in production in the same enclosure.<br>The switch is in Trunk Mode and all the traffic are in Tagged VLAN's with ID's: 1,50,90,91 and 100.<br>I can play with 6 blades.<br>I in the first Blade I installed oVirt in hosted engine mode.<br>The only S.O is CentOS 7.1<br><br>I used inxi to brig the data for you:<br><br>My First Host is the only host until now (SPM) is the first data domain (NFS) and contains the hosted engine machine.<br>I installed oVirt with ovirtmgmt in VLAN 1, over the interface eno1, without any VLAN Tagged configuration.<br><br>This the data for my first host:<br><br><a href="http://pastebin.com/dfC0XTQM" target="_blank">http://pastebin.com/dfC0XTQM</a><br><br>This the data for the Engine:<br><br><a href="http://pastebin.com/JdrMSbj0" target="_blank">http://pastebin.com/JdrMSbj0</a><br><br>This the data for the Virtual Machine created in VLAN 50:<br><br>S.O : CentOS 7.1<br>SELinux: Permissive<br>IP ADDRESS: 192.168.50.8<br>PREFIX: 27<br>GATEWAY: 192.168.50.1<br>Interface: eth0<br><br>The Virtual Machine hasn´t any VLAN configuration.<br><br>In the 3 S.O, Network Manager is stopped and disabled, connectivity is managed by the network daemon.<br><br>This is the data for the Networking in the admin interface:<br><br><a href="http://postimg.org/image/lbypejxrh/" target="_blank">http://postimg.org/image/lbypejxrh/</a><br><br><a href="http://postimg.org/image/jtkyhqs8f/" target="_blank">http://postimg.org/image/jtkyhqs8f/</a><br><br><a href="http://postimg.org/image/7dwf1nb9f/" target="_blank">http://postimg.org/image/7dwf1nb9f/</a><br><br><a href="http://postimg.org/image/6i9t75g33/" target="_blank">http://postimg.org/image/6i9t75g33/</a><br><br><a href="http://postimg.org/image/sm8e6lecv/" target="_blank">http://postimg.org/image/sm8e6lecv/</a><br><br><a href="http://postimg.org/image/cvig7rjuv/" target="_blank">http://postimg.org/image/cvig7rjuv/</a><br><br><a href="http://postimg.org/image/fxcthsrtl/" target="_blank">http://postimg.org/image/fxcthsrtl/</a><br><br><a href="http://postimg.org/image/o6xjwwvyz/" target="_blank">http://postimg.org/image/o6xjwwvyz/</a><br><br><a href="http://postimg.org/image/pv5ar5v3j/" target="_blank">http://postimg.org/image/pv5ar5v3j/</a><br><br><a href="http://postimg.org/image/dx8br0gq7/" target="_blank">http://postimg.org/image/dx8br0gq7/</a><br><br><a href="http://postimg.org/image/baixp4b0j/" target="_blank">http://postimg.org/image/baixp4b0j/</a><br><br>This the case<br><br>With No IP in the VLAN, and IP in the Virtual Machine, From the Virtual Machine can ping myself (192.168.50.8) but I can't reach the gateway, can't reach the host, can't reach Internet.<br><br>Any help is appreciated<br><br>Thanks Friends of oVirt<br><br><br><br><br><br><br><br></div><div><div><div class="gmail_extra"><br><div class="gmail_quote">2015-07-06 7:51 GMT-05:00 Soeren Malchow <span dir="ltr"><<a href="mailto:soeren.malchow@mcon.net" target="_blank">soeren.malchow@mcon.net</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
To make it easier to understand what the situation is, it would help to<br>
see your bridging configuration and your interface configration.<br>
<br>
Something like:<br>
<br>
#> ip addr<br>
<br>
And<br>
<br>
#> brctl show<br>
<br>
Regards<br>
Soeren<br>
<br>
On 06/07/15 13:30, "<a href="mailto:users-bounces@ovirt.org" target="_blank">users-bounces@ovirt.org</a> on behalf of Dan Kenigsberg"<br>
<div><div><<a href="mailto:users-bounces@ovirt.org" target="_blank">users-bounces@ovirt.org</a> on behalf of <a href="mailto:danken@redhat.com" target="_blank">danken@redhat.com</a>> wrote:<br>
<br>
>On Tue, Jun 30, 2015 at 03:48:49PM -0500, Julián Tete wrote:<br>
>> Hi Friends of oVirt<br>
>><br>
>> I'm trying to migrate my company from VMware to oVirt.<br>
><br>
>We'd like to help you do this!<br>
><br>
>> In my final tests, I set up 2 more VLANs in oVirt, (VM VLANs)<br>
>> The Virtual Machines in these VLANs, can be reached from the external<br>
>>IPs<br>
>> from the net range,<br>
>> but from the Virtual machines only can ping the Host with the Bridge and<br>
>> itself, can't reach the gateway. ¿?<br>
>><br>
>> I configured a IP Forwarding in the Host with the virtual machine, and<br>
>> nothing changes...<br>
>><br>
>> Any idea ? This is the last duty before embrace oVirt in the company.<br>
>><br>
>> Look to the VLAN 100 configuration (My desired VM Network):<br>
>><br>
>> <a href="http://postimg.org/image/7hrog0a2n/" rel="noreferrer" target="_blank">http://postimg.org/image/7hrog0a2n/</a><br>
>><br>
>> <a href="http://postimg.org/image/68b40i1vr/" rel="noreferrer" target="_blank">http://postimg.org/image/68b40i1vr/</a><br>
>><br>
>> <a href="http://postimg.org/image/lu6mlshgp/" rel="noreferrer" target="_blank">http://postimg.org/image/lu6mlshgp/</a><br>
><br>
>I must admit that I don't understand your problem yet. When you ping<br>
>from inside your guest, where are your packets dropped?<br>
><br>
>I'd like to point that your "Hosting" network, as most VM networks, is<br>
>better off left without an IP address. The benefit of this is better<br>
>security (host TCP stack is not accessible from VMs) and less chances of<br>
>routing collisions from the host.<br>
><br>
>So unless you need to use the same network for something other than VM<br>
>communication, try to clear its address.<br>
><br>
>Regards,<br>
>Dan.<br>
</div></div><div><div>>_______________________________________________<br>
>Users mailing list<br>
><a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
><a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
<br>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature"><div dir="ltr"><div>Thanks,<br></div>Ido Barkan<br></div></div>
</div>