4:06 p.m.
Greetings,
I'm attempting to get several virtual machines setup on a Fedora19
host system, with the traditional bridge network devices (br0, br1,
etc). I've done this many times before with older versions of Fedora
(16, 14, etc), and it just works. However, for reasons that I cannot
figure out, the bridge doesn't seem to be working in Fedora19. While
I can successfully connect to the outside world (local network +
internet) from inside a VM, nothing can communicate with the VM from
outside (local network). I'm referring to something as trivial as
pinging. From inside the VM, I can ping anything successfully (0%
packet loss). However, from outside the VM (on the host, or any other
system on the same network), I see 100% packet loss when pinging the
IP address of the VM.
My first question is simply, does anyone else have this working
successfully in F19? And if so, what steps did you need to follow?
I'm not using NetworkManager at all, its all the network service.
There are no firewalls involved anywhere (iptables & firewall services
are currently disabled). Here's the current host configuration:
# brctl show
bridge name bridge id STP enabled interfaces
br0 8000.38eaa792efe5 no em2
vnet1
br1 8000.38eaa792efe6 no em3
br2 8000.38eaa792efe7 no em4
vnet0
virbr0 8000.525400db3ebf yes virbr0-nic
# more /etc/sysconfig/network-scripts/ifcfg-em2
TYPE=Ethernet
BRIDGE="br0"
NAME=em2
DEVICE="em2"
UUID=aeaa839e-c89c-4d6e-9daa-79b6a1b919bd
ONBOOT=yes
HWADDR=38:EA:A7:92:EF:E5
NM_CONTROLLED="no"
# more /etc/sysconfig/network-scripts/ifcfg-br0
TYPE=Bridge
NM_CONTROLLED="no"
BOOTPROTO=dhcp
NAME=br0
DEVICE="br0"
ONBOOT=yes
# ifconfig em2 ;ifconfig br0
em2: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet6 fe80::3aea:a7ff:fe92:efe5 prefixlen 64 scopeid 0x20<link>
ether 38:ea:a7:92:ef:e5 txqueuelen 1000 (Ethernet)
RX packets 100093 bytes 52354831 (49.9 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 25321 bytes 15791341 (15.0 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device memory 0xf7d00000-f7e00000
br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 10.31.99.226 netmask 255.255.252.0 broadcast 10.31.99.255
inet6 fe80::3aea:a7ff:fe92:efe5 prefixlen 64 scopeid 0x20<link>
ether 38:ea:a7:92:ef:e5 txqueuelen 0 (Ethernet)
RX packets 19619 bytes 1963328 (1.8 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 11 bytes 1074 (1.0 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Relevant section from /etc/libvirt/qemu/foo.xml (one of the VMs with
this problem):
<interface type='bridge'>
<mac address='52:54:00:26:22:9d'/>
<source bridge='br0'/>
<model type='virtio'/>
<address type='pci' domain='0x0000' bus='0x00'
slot='0x03'
function='0x0'/>
</interface>
I can provide additional information, if requested. thanks!
5:59 p.m.
On Tue, Aug 6, 2013 at 3:48 PM, Jorge Fábregas <jorge.fabregas(a)gmail.com> wrote:
On 08/06/2013 05:06 PM, Lonni J Friedman wrote:
> I can provide additional information, if requested. thanks!
Hi Lonni,
I don't have Fedora 19 so I can't help that much. I suggest you take a
look at the firewall rules in your host system (check out what rules
libvirt inserts). Also, you might want to ask on the fedora-virt
mailing list (more chances of getting a response when it comes to
virt-releated questions):
https://admin.fedoraproject.org/mailman/listinfo/virt
Hi Jorge,
I already have iptables & firewall disabled on the host, so unless
libvirt is quietly re-enabling them and changing the rules, I'd assume
that can't be the issue.
I'll definitely try the fedora-virt list though, thanks!
6:42 p.m.
----- Original Message -----
| On Tue, Aug 6, 2013 at 4:11 PM, Patrick Lists
| <fedora-list(a)puzzled.xs4all.nl> wrote:
| > On 08/07/2013 01:03 AM, Lonni J Friedman wrote:
| > [snip]
| >>
| >> I have firewalld disabled completely. What does your
| >>
| >> /etc/sysconfig/network-scripts/ifcfg-br0 (and associated
| >> interface)
| >> look like? Also, can you post your 'brctl show' output?
| >
| >
| > Sure, here you go:
| >
| >
| > $ brctl show
| > bridge name bridge id STP enabled interfaces
| > br0 0080.<redacted> no p21p1
| >
|
| Is this the output while the VM is running, or when its shut down?
|
| >
| > # cat /etc/sysconfig/network-scripts/ifcfg-br0
| > DEVICE=br0
| > STP=off
| > TYPE=Bridge
| > BOOTPROTO=dhcp
| > DEFROUTE=yes
| > IPV4_FAILURE_FATAL=no
| > IPV6INIT=yes
| > IPV6_AUTOCONF=yes
| > IPV6_DEFROUTE=yes
| > IPV6_FAILURE_FATAL=no
| > NAME=br0
| > UUID=3be2553a-63ba-40c9-88b2-7aed4cf53164
| > ONBOOT=yes
| > PEERDNS=yes
| > PEERROUTES=yes
| > IPV6_PEERDNS=yes
| > IPV6_PEERROUTES=yes
| > IPV6_PRIVACY=rfc3041
| >
| >
| > # cat /etc/sysconfig/network-scripts/ifcfg-br0_slave_p21p1
| > TYPE=Ethernet
| > NAME="br0 slave p21p1"
| > UUID=b99e8e57-a00e-4085-9e98-4156c2039b40
| > ONBOOT=yes
| > BRIDGE=3be2553a-63ba-40c9-88b2-7aed4cf53164
| > HWADDR=<redacted>
| > MACADDR=<redacted>
| >
| >
| > # cat /etc/sysconfig/network-scripts/ifcfg-p21p1
| > # Generated by dracut initrd
| > DEVICE="p21p1"
| > ONBOOT=no
| > NETBOOT=yes
| > UUID="507b058d-18ad-4dbc-8a46-30eb1bd0974"
| > BOOTPROTO=dhcp
| > TYPE=Ethernet
| > NAME="p21p1"
| > DEFROUTE=yes
| > IPV6INIT=no
| > ZONE=home
| > HWADDR=<redacted>
| > PEERDNS=yes
| > PEERROUTES=yes
|
| I don't see anything here that differs from my configuration.
|
| To confirm, you're able to ping your VM's assigned IP address from
| outside the VM?
| --
| users mailing list
| users(a)lists.fedoraproject.org
| To unsubscribe or change subscription options:
| https://admin.fedoraproject.org/mailman/listinfo/users
| Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
| Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
| Have a question? Ask away: http://ask.fedoraproject.org
|
Can you ping the VMs from the hypervisor either?
--
James A. Peltier
Manager, IT Services - Research Computing Group
Simon Fraser University - Burnaby Campus
Phone : 778-782-6573
Fax : 778-782-3045
E-Mail : jpeltier(a)sfu.ca
Website : http://www.sfu.ca/itservices
“A successful person is one who can lay a solid foundation from the bricks others have
thrown at them.” -David Brinkley via Luke Shaw
11:57 p.m.
On 07.08.2013 00:48, Jorge Fábregas wrote:
On 08/06/2013 05:06 PM, Lonni J Friedman wrote:
> I can provide additional information, if requested. thanks!
Hi Lonni,
I don't have Fedora 19 so I can't help that much. I suggest you take a
look at the firewall rules in your host system (check out what rules
libvirt inserts). Also, you might want to ask on the fedora-virt
mailing list (more chances of getting a response when it comes to
virt-releated questions):
https://admin.fedoraproject.org/mailman/listinfo/virt
OP doesn't use standard Fedora tools - NetworkManager/FirewallD, and
also doesn't mention how the 'veemees' are made, so
https://www.redhat.com/mailman/listinfo/libvirt-users
https://www.redhat.com/mailman/listinfo/virt-tools-list
would be a good start. ;)
poma
9:20 p.m.
On 08/07/2013 03:47 AM, Lonni J Friedman wrote:
On Tue, Aug 6, 2013 at 6:41 PM, Patrick Lists
<fedora-list(a)puzzled.xs4all.nl> wrote:
> On 08/07/2013 02:59 AM, Lonni J Friedman wrote:
> [snip]
>>
>> That's odd that you don't have any virtual network interfaces (vnet0,
>>
>> vnet1, etc). I wonder if that's some weird NetworkManager foo.
>
>
> Nope, I removed/deleted those.
>
How? I was under the impression that they were created by libvirt.
Iirc I did something like this:
virsh undefine <interface>
virsh destroy <interface>
Regards,
Patrick
8:47 p.m.
On Tue, Aug 6, 2013 at 6:41 PM, Patrick Lists
<fedora-list(a)puzzled.xs4all.nl> wrote:
On 08/07/2013 02:59 AM, Lonni J Friedman wrote:
[snip]
>
> That's odd that you don't have any virtual network interfaces (vnet0,
>
> vnet1, etc). I wonder if that's some weird NetworkManager foo.
Nope, I removed/deleted those.
How? I was under the impression that they were created by libvirt.
7:59 p.m.
On Tue, Aug 6, 2013 at 4:54 PM, Patrick Lists
<fedora-list(a)puzzled.xs4all.nl> wrote:
On 08/07/2013 01:31 AM, Lonni J Friedman wrote:
>
> On Tue, Aug 6, 2013 at 4:11 PM, Patrick Lists
> <fedora-list(a)puzzled.xs4all.nl> wrote:
>>
>> On 08/07/2013 01:03 AM, Lonni J Friedman wrote:
>> [snip]
>>>
>>>
>>> I have firewalld disabled completely. What does your
>>>
>>> /etc/sysconfig/network-scripts/ifcfg-br0 (and associated interface)
>>> look like? Also, can you post your 'brctl show' output?
>>
>>
>>
>> Sure, here you go:
>>
>>
>> $ brctl show
>> bridge name bridge id STP enabled interfaces
>> br0 0080.<redacted> no p21p1
>>
>
> Is this the output while the VM is running, or when its shut down?
brctl show was done when there were 5 VMs running.
> I don't see anything here that differs from my configuration.
>
> To confirm, you're able to ping your VM's assigned IP address from
> outside the VM?
Yes. I can ping both ways:
VM <--> VM
VM <--> Hypervisor host
VM <--> external host (www.google.com)
LAN host (not Hypervisor) <--> VM
That's odd that you don't have any virtual network interfaces (vnet0,
vnet1, etc). I wonder if that's some weird NetworkManager foo.
7:56 p.m.
On Tue, Aug 6, 2013 at 4:42 PM, James A. Peltier <jpeltier(a)sfu.ca> wrote:
----- Original Message -----
| On Tue, Aug 6, 2013 at 4:11 PM, Patrick Lists
| <fedora-list(a)puzzled.xs4all.nl> wrote:
| > On 08/07/2013 01:03 AM, Lonni J Friedman wrote:
| > [snip]
| >>
| >> I have firewalld disabled completely. What does your
| >>
| >> /etc/sysconfig/network-scripts/ifcfg-br0 (and associated
| >> interface)
| >> look like? Also, can you post your 'brctl show' output?
| >
| >
| > Sure, here you go:
| >
| >
| > $ brctl show
| > bridge name bridge id STP enabled interfaces
| > br0 0080.<redacted> no p21p1
| >
|
| Is this the output while the VM is running, or when its shut down?
|
| >
| > # cat /etc/sysconfig/network-scripts/ifcfg-br0
| > DEVICE=br0
| > STP=off
| > TYPE=Bridge
| > BOOTPROTO=dhcp
| > DEFROUTE=yes
| > IPV4_FAILURE_FATAL=no
| > IPV6INIT=yes
| > IPV6_AUTOCONF=yes
| > IPV6_DEFROUTE=yes
| > IPV6_FAILURE_FATAL=no
| > NAME=br0
| > UUID=3be2553a-63ba-40c9-88b2-7aed4cf53164
| > ONBOOT=yes
| > PEERDNS=yes
| > PEERROUTES=yes
| > IPV6_PEERDNS=yes
| > IPV6_PEERROUTES=yes
| > IPV6_PRIVACY=rfc3041
| >
| >
| > # cat /etc/sysconfig/network-scripts/ifcfg-br0_slave_p21p1
| > TYPE=Ethernet
| > NAME="br0 slave p21p1"
| > UUID=b99e8e57-a00e-4085-9e98-4156c2039b40
| > ONBOOT=yes
| > BRIDGE=3be2553a-63ba-40c9-88b2-7aed4cf53164
| > HWADDR=<redacted>
| > MACADDR=<redacted>
| >
| >
| > # cat /etc/sysconfig/network-scripts/ifcfg-p21p1
| > # Generated by dracut initrd
| > DEVICE="p21p1"
| > ONBOOT=no
| > NETBOOT=yes
| > UUID="507b058d-18ad-4dbc-8a46-30eb1bd0974"
| > BOOTPROTO=dhcp
| > TYPE=Ethernet
| > NAME="p21p1"
| > DEFROUTE=yes
| > IPV6INIT=no
| > ZONE=home
| > HWADDR=<redacted>
| > PEERDNS=yes
| > PEERROUTES=yes
|
| I don't see anything here that differs from my configuration.
|
| To confirm, you're able to ping your VM's assigned IP address from
| outside the VM?
|
Can you ping the VMs from the hypervisor either?
Not sure what you mean exactly. Are you referring to some special
libvirt based command, or something else?
6:54 p.m.
On 08/07/2013 01:31 AM, Lonni J Friedman wrote:
On Tue, Aug 6, 2013 at 4:11 PM, Patrick Lists
<fedora-list(a)puzzled.xs4all.nl> wrote:
> On 08/07/2013 01:03 AM, Lonni J Friedman wrote:
> [snip]
>>
>> I have firewalld disabled completely. What does your
>>
>> /etc/sysconfig/network-scripts/ifcfg-br0 (and associated interface)
>> look like? Also, can you post your 'brctl show' output?
>
>
> Sure, here you go:
>
>
> $ brctl show
> bridge name bridge id STP enabled interfaces
> br0 0080.<redacted> no p21p1
>
Is this the output while the VM is running, or when its shut down?
brctl show was done when there were 5 VMs running.
I don't see anything here that differs from my configuration.
To confirm, you're able to ping your VM's assigned IP address from
outside the VM?
Yes. I can ping both ways:
VM <--> VM
VM <--> Hypervisor host
VM <--> external host (www.google.com)
LAN host (not Hypervisor) <--> VM
Regards,
Patrick
6:31 p.m.
On Tue, Aug 6, 2013 at 4:11 PM, Patrick Lists
<fedora-list(a)puzzled.xs4all.nl> wrote:
On 08/07/2013 01:03 AM, Lonni J Friedman wrote:
[snip]
>
> I have firewalld disabled completely. What does your
>
> /etc/sysconfig/network-scripts/ifcfg-br0 (and associated interface)
> look like? Also, can you post your 'brctl show' output?
Sure, here you go:
$ brctl show
bridge name bridge id STP enabled interfaces
br0 0080.<redacted> no p21p1
Is this the output while the VM is running, or when its shut down?
# cat /etc/sysconfig/network-scripts/ifcfg-br0
DEVICE=br0
STP=off
TYPE=Bridge
BOOTPROTO=dhcp
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
NAME=br0
UUID=3be2553a-63ba-40c9-88b2-7aed4cf53164
ONBOOT=yes
PEERDNS=yes
PEERROUTES=yes
IPV6_PEERDNS=yes
IPV6_PEERROUTES=yes
IPV6_PRIVACY=rfc3041
# cat /etc/sysconfig/network-scripts/ifcfg-br0_slave_p21p1
TYPE=Ethernet
NAME="br0 slave p21p1"
UUID=b99e8e57-a00e-4085-9e98-4156c2039b40
ONBOOT=yes
BRIDGE=3be2553a-63ba-40c9-88b2-7aed4cf53164
HWADDR=<redacted>
MACADDR=<redacted>
# cat /etc/sysconfig/network-scripts/ifcfg-p21p1
# Generated by dracut initrd
DEVICE="p21p1"
ONBOOT=no
NETBOOT=yes
UUID="507b058d-18ad-4dbc-8a46-30eb1bd0974"
BOOTPROTO=dhcp
TYPE=Ethernet
NAME="p21p1"
DEFROUTE=yes
IPV6INIT=no
ZONE=home
HWADDR=<redacted>
PEERDNS=yes
PEERROUTES=yes
I don't see anything here that differs from my configuration.
To confirm, you're able to ping your VM's assigned IP address from
outside the VM?
6:11 p.m.
On 08/07/2013 01:03 AM, Lonni J Friedman wrote:
[snip]
I have firewalld disabled completely. What does your
/etc/sysconfig/network-scripts/ifcfg-br0 (and associated interface)
look like? Also, can you post your 'brctl show' output?
Sure, here you go:
$ brctl show
bridge name bridge id STP enabled interfaces
br0 0080.<redacted> no p21p1
# cat /etc/sysconfig/network-scripts/ifcfg-br0
DEVICE=br0
STP=off
TYPE=Bridge
BOOTPROTO=dhcp
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
NAME=br0
UUID=3be2553a-63ba-40c9-88b2-7aed4cf53164
ONBOOT=yes
PEERDNS=yes
PEERROUTES=yes
IPV6_PEERDNS=yes
IPV6_PEERROUTES=yes
IPV6_PRIVACY=rfc3041
# cat /etc/sysconfig/network-scripts/ifcfg-br0_slave_p21p1
TYPE=Ethernet
NAME="br0 slave p21p1"
UUID=b99e8e57-a00e-4085-9e98-4156c2039b40
ONBOOT=yes
BRIDGE=3be2553a-63ba-40c9-88b2-7aed4cf53164
HWADDR=<redacted>
MACADDR=<redacted>
# cat /etc/sysconfig/network-scripts/ifcfg-p21p1
# Generated by dracut initrd
DEVICE="p21p1"
ONBOOT=no
NETBOOT=yes
UUID="507b058d-18ad-4dbc-8a46-30eb1bd0974"
BOOTPROTO=dhcp
TYPE=Ethernet
NAME="p21p1"
DEFROUTE=yes
IPV6INIT=no
ZONE=home
HWADDR=<redacted>
PEERDNS=yes
PEERROUTES=yes
Regards,
Patrick
6:03 p.m.
On Tue, Aug 6, 2013 at 3:59 PM, Patrick Lists
<fedora-list(a)puzzled.xs4all.nl> wrote:
On 08/06/2013 11:06 PM, Lonni J Friedman wrote:
[snip]
> My first question is simply, does anyone else have this working
> successfully in F19? And if so, what steps did you need to follow?
I have a bridge working using NetworkManager on my F19 x86_64 workstation by
setting it up through Settings -> Network. It's also a bit wonky in that the
NetworkManager icon always shows an X for no connection. Guess it does not
check br0. Not sure if it's related but mtr and wireshark no longer work. I
have not yet investigated why.
> I'm not using NetworkManager at all, its all the network service.
> There are no firewalls involved anywhere (iptables & firewall services
> are currently disabled). Here's the current host configuration:
Firewalld is enabled on my box. Had to change the default zone to Home. Make
sure that zone is also in the /etc/sysconfig/network-scripts/ifcfg-...
I have firewalld disabled completely. What does your
/etc/sysconfig/network-scripts/ifcfg-br0 (and associated interface)
look like? Also, can you post your 'brctl show' output?
5:59 p.m.
On 08/06/2013 11:06 PM, Lonni J Friedman wrote:
[snip]
My first question is simply, does anyone else have this working
successfully in F19? And if so, what steps did you need to follow?
I have a bridge working using NetworkManager on my F19 x86_64
workstation by setting it up through Settings -> Network. It's also a
bit wonky in that the NetworkManager icon always shows an X for no
connection. Guess it does not check br0. Not sure if it's related but
mtr and wireshark no longer work. I have not yet investigated why.
I'm not using NetworkManager at all, its all the network
service.
There are no firewalls involved anywhere (iptables & firewall services
are currently disabled). Here's the current host configuration:
Firewalld is enabled on my box. Had to change the default zone to Home.
Make sure that zone is also in the
/etc/sysconfig/network-scripts/ifcfg-... files.
Regards,
Patrick
5:48 p.m.
On 08/06/2013 05:06 PM, Lonni J Friedman wrote:
I can provide additional information, if requested. thanks!
Hi Lonni,
I don't have Fedora 19 so I can't help that much. I suggest you take a
look at the firewall rules in your host system (check out what rules
libvirt inserts). Also, you might want to ask on the fedora-virt
mailing list (more chances of getting a response when it comes to
virt-releated questions):
https://admin.fedoraproject.org/mailman/listinfo/virt
--
Jorge
3934
days inactive
3935
days old
14 comments
5 participants
participants (5)
-
James A. Peltier -
Jorge Fábregas -
Lonni J Friedman -
Patrick Lists -
poma