neutron floatingip-create e81ad371-90ed-488f-9084-3e6f4b13c5c9 --tenant-id 6b2af498b8b4436383d86dbe39a6d171 --floating-ip-address 10.64.21.100 命令分配指定ip给租户
neutron floatingip-list --all-t |grep xxx 释放ip
neutron floatingip-delete 0caac660-27de-49d1-8968-ef0760630fa7
重新获取dhcp 地址
dhclient -r eth0
dhclient
neutron subnet-update --allocation-pool start=10.63.248.11,end=10.64.24.25 --allocation-pool start=10.63.249.11,end=10.64.24.25 1a1c0020-6df7-46cf-a74d-1dd950fe79df 子网的分配地址池无法编辑2个范围
[root@host]# neutron net-list
+--------------------------------------+------------------------------------+------------------------------------------------------+
| id | name | subnets |
+--------------------------------------+------------------------------------+------------------------------------------------------+
| 12e57553-8007-44e4-bca7-e9eaa42216e5 | smallnet | 3b56ceb1-ca57-4b80-9a5c-164f28dab4c7 192.168.1.0/24 |
| 242dfb2b-afb9-485f-acbd-a3374e2e244e | Cloud_Clontainer_Array_private_net | 17157c41-cbf0-4266-b945-60d073ff02ea 192.168.10.0/24 |
| 379f52ab-762b-4610-a827-5a2720b446ab | Paas_private | 81624928-923f-47ec-a624-ac4236322701 192.1.0.0/24 |
| 52e21274-54f7-49d2-805f-62d779d1ae28 | backup_net | d1485473-4d61-46d3-b102-df3dc8bee538 172.168.3.0/24 |
| 8d7b714b-306a-47bb-bf0c-5485e95cfcfc | Ceph_Cluster | a54eeea0-7cfb-4414-bdeb-7d00aa0e2e9e 123.0.0.0/24 |
| 99dd3e9f-723a-4af3-9a66-44998cf35eaa | lte_ci_private_net | 1597cbe8-01f2-4e3d-83b8-58a3f878cf80 192.168.1.0/24 |
| a1e57d19-6937-41c3-af22-1d1841738c35 | LTE-net | a94e2544-ec8f-4df0-9b33-63040e8f9075 172.168.1.0/24 |
| b3e4fdae-a5c7-4bfd-b88e-92818a3aeb3e | UE-net | 7c02aa16-9ca2-455e-97f1-887635d71c39 172.171.1.0/24 |
| dce74f47-ae46-48f7-bf0f-d278680b334d | cop_private | 547cc510-7ef6-4a85-84cb-3e12318a44ed 192.0.0.0/24 |
| e3127287-b969-4a07-ad3b-40c3c7830312 | CMAC | e3585c14-1c57-4ad1-a3b4-a86bd2a3258e 191.168.0.0/24 |
| e3ee629d-e002-4c1e-b8d7-2b2cd3a14c7b | Ceph_Public | f2cbc5ee-374f-4d3d-b60a-09492aabe5eb 123.123.0.0/24 |
| e81ad371-90ed-488f-9084-3e6f4b13c5c9 | bignet | c0bd1803-34bc-4fce-b077-39200b21dab6 10.89.216.0/22 |
+--------------------------------------+------------------------------------+------------------------------------------------------+
[root@hos]# neutron floatingip-create e81ad371-90ed-488f-9084-3e6f4b13c5c9 --tenant-id fea4879590364ec2af59fd88b547371e 命令分配浮动ip
Created a new floatingip:
+---------------------+--------------------------------------+
| Field | Value |
+---------------------+--------------------------------------+
| fixed_ip_address | |
| floating_ip_address | 10.89.219.60 |
| floating_network_id | e81ad371-90ed-488f-9084-3e6f4b13c5c9 |
| id | 9c00d994-5411-4c78-a89a-6cdf507a9415 |
| port_id | |
| router_id | |
| status | DOWN |
| tenant_id | fea4879590364ec2af59fd88b547371e |
+---------------------+--------------------------------------+
neutron port-list|grep xxx.xxx.xxx.xxx|awk '{print $2}'
nova interface-detach bd50770d-db95-47bd-86bf-2c30e632d981 dbbaaf67-62f1-4128-ac18-349c5a1a92de
[root@host]# ip netns exec qdhcp-12e8c626-aa9f-4beb-b9f5-0b61be6ba921 ifconfig
Cannot open network namespace "qdhcp-12e8c626-aa9f-4beb-b9f5-0b61be6ba921": No such file or directory
[root@host]# ip netns
qdhcp-9aa44484-87ec-434c-8e6e-37039b2f3994
qdhcp-18b68d40-462a-4964-ba11-12a4b55bf1ca
qdhcp-145f21d2-67fa-458a-a4f1-8ab52dcad39b
qdhcp-aec65099-cb0c-4a06-abe6-176d2d8e4ba1
[root@host]# neutron dhcp-agent-list-hosting-net 12e8c626-aa9f-4beb-b9f5-0b61be6ba921
+--------------------------------------+-----------------+----------------+-------+
| id | host | admin_state_up | alive |
+--------------------------------------+-----------------+----------------+-------+
| bfaea9ad-926d-45ca-b385-f8a6ccf01141 | host-172-22-4-1 | True | :-) |
+--------------------------------------+-----------------+----------------+-------+
[root@host]# neutron subnet-show 2bec9034-d8dd-4571-aaac-8619ff14cb38
+-------------------+--------------------------------------------------+
| Field | Value |
+-------------------+--------------------------------------------------+
| allocation_pools | {"start": "172.20.68.3", "end": "172.20.71.250"} |
| cidr | 172.20.68.0/22 |
| dns_nameservers | |
| enable_dhcp | False |
| gateway_ip | 172.20.68.2 |
| host_routes | |
| id | 2bec9034-d8dd-4571-aaac-8619ff14cb38 |
| ip_version | 4 |
| ipv6_address_mode | |
| ipv6_ra_mode | |
| name | sub_DEV_PROD_VDC_SZ_Privatenet |
| network_id | 12e8c626-aa9f-4beb-b9f5-0b61be6ba921 |
| subnetpool_id | |
| tenant_id | ec32e2dfa7cb413cbd14a78400f8bdb6 |
+-------------------+--------------------------------------------------+
1 禁用安全组
1 在控制节点和计算节点上禁用安全组
1. /etc/neutron/plugin.ini
enable_security_group = True 改为 enable_security_group = False
2. /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini
# enable_security_group = True
去掉#号,改为 enable_security_group = False
# firewall_driver = neutron.agent.firewall.NoopFirewallDriver
-- 这句把前面的#号去掉
文件最后一行
firewall_driver=neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
把这句注释掉。
3.重启网络服务;
systemctl restart openvswitch.service
systemctl restart neutron-openvswitch-agent.service
恢复dhcp binding fail的端口
1 查看所有的DHCP口,发现DHCP的binding fail的口,
root@host# neutron port-list -c id -c binding:vif_type -c device_owner | grep dhcp
| 279b4e28-4bd5-4906-a8ee-65779c5559ba | binding_failed | network:dhcp |
2 查看端口对应的net ,确认这个NET是否是有用的NET
[root@host]# neutron port-show 279b4e28-4bd5-4906-a8ee-65779c5559ba
| network_id | 9ab10fe5-fdaf-4e73-b1b9-7ec9b49b8a7b |
3 查看net归属于哪个DHCP
[root@host]# neutron dhcp-agent-list-hosting-net 9ab10fe5-fdaf-4e73-b1b9-7ec9b49b8a7b
+--------------------------------------+-------------+----------------+-------+
| id | host | admin_state_up | alive |
+--------------------------------------+-------------+----------------+-------+
| 12e23ceb-1ee6-4eb8-a33d-cc421c73f02c | host1 | True | xxx |
| 4b3c1faf-e479-4528-8c8d-93cd29e07844 | host2 | True | :-) |
+--------------------------------------+-------------+----------------+-------+
4 在对应的DHCP节点上,查看对应的dhcp口
[root@host]# ip netns exec qdhcp-9ab10fe5-fdaf-4e73-b1b9-7ec9b49b8a7b ifconfig -a
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 0 (Local Loopback)
RX packets 2 bytes 604 (604.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 2 bytes 604 (604.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
tape029f89e-96: flags=67<UP,BROADCAST,RUNNING> mtu 1500
inet 10.64.75.10 netmask 255.255.254.0 broadcast 10.64.75.255
inet6 fe80::f816:3eff:fee3:b1f prefixlen 64 scopeid 0x20<link>
ether fa:16:3e:e3:0b:1f txqueuelen 0 (Ethernet)
RX packets 364 bytes 36863 (35.9 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 9 bytes 738 (738.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
5 在ovs桥上把这个端口给删了
ovs-vsctl del-port tape029f89e-96
然后重启dhcp,再用ip netns exec qdhcp-9ab10fe5-fdaf-4e73-b1b9-7ec9b49b8a7b ifconfig -a 看下dhcp口,
再查看下ovs桥上这个口是否已经不是4095了,4095基本都是由问题的口。