<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta name=Generator content="Microsoft Word 14 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Sprechblasentext Zchn";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.E-MailFormatvorlage18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.E-MailFormatvorlage19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage20
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage21
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.E-MailFormatvorlage22
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.SprechblasentextZchn
{mso-style-name:"Sprechblasentext Zchn";
mso-style-priority:99;
mso-style-link:Sprechblasentext;
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Thanks! That was the solution. Everything works fine now!<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>Von:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Robert Foote [mailto:rfoote@bpsnode.com] <br><b>Gesendet:</b> Donnerstag, 4. September 2014 16:52<br><b>An:</b> Hüning, Christian; Users@lists.opennebula.org<br><b>Betreff:</b> RE: [one-users] Isolated VMs on different Hosts can't communicate - ONE 4.8, OVS 2.0.1<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>If everything else is working as you mentioned before, I would think that you would only need to set those ports to trunk and allow all vlans to pass through. After that, I would imagine you’d be able to separate VMs on the same VLAN over multiple hosts, and ping between them.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>That should be all you need to do at this point.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Robert Foote<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>bpsNode<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><a href="http://www.bpsnode.com">www.bpsnode.com</a><o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US>From:</span></b><span lang=EN-US> Hüning, Christian [<a href="mailto:Christian.Huening@haw-hamburg.de">mailto:Christian.Huening@haw-hamburg.de</a>] <br><b>Sent:</b> Thursday, September 04, 2014 9:43 AM<br><b>To:</b> Robert Foote; <a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br><b>Subject:</b> AW: [one-users] Isolated VMs on different Hosts can't communicate - ONE 4.8, OVS 2.0.1<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Thanks for the quick reply!<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>I have verified that all of these ports are set to “untagged”. So this is essentially wrong as I see ;-)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Do I need to configure anything else on my hypervisor interfaces or is it just the switch I need to touch?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Thanks!<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Christain<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b>Von:</b> Robert Foote [<a href="mailto:rfoote@bpsnode.com">mailto:rfoote@bpsnode.com</a>] <br><b>Gesendet:</b> Donnerstag, 4. September 2014 16:40<br><b>An:</b> Hüning, Christian; <a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br><b>Betreff:</b> RE: [one-users] Isolated VMs on different Hosts can't communicate - ONE 4.8, OVS 2.0.1<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Your colleague is probably correct. <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Have you verified that each of the ports on your physical switch, which the hypervisors are plugged into, have those port settings, set to trunk and allow/forward all VLANs?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>Robert Foote<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'>bpsNode<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><a href="http://www.bpsnode.com">www.bpsnode.com</a><o:p></o:p></span></p></div><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US>From:</span></b><span lang=EN-US> Users [<a href="mailto:users-bounces@lists.opennebula.org">mailto:users-bounces@lists.opennebula.org</a>] <b>On Behalf Of </b>Hüning, Christian<br><b>Sent:</b> Thursday, September 04, 2014 9:27 AM<br><b>To:</b> <a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br><b>Subject:</b> [one-users] Isolated VMs on different Hosts can't communicate - ONE 4.8, OVS 2.0.1<o:p></o:p></span></p></div></div><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal>Hi there,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=EN-US>I have a cluster of 5 hosts running with openNebula 4.8 and just recently configured OpenvSwitch on all these nodes.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Networking is working just fine. This holds also true for VLAN isolation, but just as long as the VMs belonging to the isolated Virtual Network reside on the same physical host. When I move these VMs to different hosts, they can’t communicate with each other anymore. Non-isolated nodes can communicate to everywhere without problems.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Is that intentional? I chose OpenVswitch because the ONE docs say it requires no support from the switch hardware (or more specifically it says 802.1Q would require support).<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>A colleague suggested it might have to do with the switch not forwarding the tagged packets from Open vSwitch. Can that be the cause? Does OVS even tag the packets?<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Here’s my environment:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>OpenNebula 4.8<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Open vSwitch 2.0.1<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Cisco Switch<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Host OS: Ubuntu Server 14.04 LTS (latest patches)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Output from ‘ovs-vsctl show’:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Bridge "br0"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Port "vnet3"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Interface "vnet3"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Port "bond0"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Interface "bond0"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Port "vnet1"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Interface "vnet1"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Port "vnet2"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Interface "vnet2"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Port "vnet5"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Interface "vnet5"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Port "br0"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Interface "br0"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> type: internal<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Port "vnet0"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Interface "vnet0"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Port "vnet4"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Interface "vnet4"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> ovs_version: "2.0.1"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Where “br0” is my ovs bridge interface which has the external ‘real’ IP address configured and “bond0” is a link aggregated dual Gbit interface which is the port for “br0”<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>I would greatly appreciate some suggestions or ideas on this, since I am a bit lost.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Cheers,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Christian<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal>-----------------------------------------------<o:p></o:p></p><p class=MsoNormal>Christian Hüning, BSc.<o:p></o:p></p><p class=MsoNormal>Fakultät Technik und Informatik, Department Informatik<o:p></o:p></p><p class=MsoNormal><span lang=EN-US>Berliner Tor 7<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>20099 Hamburg<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Web: <a href="http://www.mars-group.org">http://www.mars-group.org</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span lang=EN-US style='font-size:12.0pt;font-family:"Times New Roman","serif"'><hr size=1 width="99%" noshade style='color:#909090' align=center></span></div><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse'><tr><td style='padding:0cm 11.25pt 0cm 6.0pt'><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><a href="http://www.avast.com/"><span style='text-decoration:none'><img border=0 id="_x0000_i1026" src="http://static.avast.com/emails/avast-mail-stamp.png"></span></a><o:p></o:p></span></p></td><td style='padding:0cm 0cm 0cm 0cm ..75pt'><p><span style='font-family:"Calibri","sans-serif";color:#3D4D5A'>This email is free from viruses and malware because <a href="http://www.avast.com/">avast! Antivirus</a> protection is active. <o:p></o:p></span></p></td></tr></table><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span lang=EN-US style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p><div class=MsoNormal align=center style='text-align:center'><span lang=EN-US style='font-size:12.0pt;font-family:"Times New Roman","serif"'><hr size=1 width="99%" noshade style='color:#909090' align=center></span></div><table class=MsoNormalTable border=0 cellspacing=0 cellpadding=0 style='border-collapse:collapse'><tr><td style='padding:0cm 11.25pt 0cm 6.0pt'><p class=MsoNormal><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><a href="http://www.avast.com/"><span style='text-decoration:none'><img border=0 id="_x0000_i1028" src="http://static.avast.com/emails/avast-mail-stamp.png"></span></a><o:p></o:p></span></p></td><td style='padding:.75pt .75pt .75pt .75pt'><p><span style='font-family:"Calibri","sans-serif";color:#3D4D5A'>This email is free from viruses and malware because <a href="http://www.avast.com/">avast! Antivirus</a> protection is active. <o:p></o:p></span></p></td></tr></table><p class=MsoNormal><span lang=EN-US style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p> </o:p></span></p></div></body></html>