On Friday 22 November 2013 01:24 PM, Gao feng wrote:
On 11/22/2013 03:47 PM, Sherin A wrote:
Hello,
I am not able to see vrbr0 in my box. Can some one help me with this ? . I am trying KVM+libvirt and planing to use Routed mode. I hope this virbr0 must be up for using this . I can give an strace too.
OS : Debian , kernel 3.12.0 libvrit version : 0.9.8 ____________________________________________________________________ root@:~# ifconfig br0 Link encap:Ethernet HWaddr 4c:72:b9:32:32:86 inet addr:10.0.0.12 Bcast:10.0.0.255 Mask:255.255.255.0 inet6 addr: fe80::4e72:b9ff:fe32:3286/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:4523 errors:0 dropped:0 overruns:0 frame:0 TX packets:4068 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:2286336 (2.2 MB) TX bytes:411238 (411.2 KB)
eth0 Link encap:Ethernet HWaddr 4c:72:b9:32:32:86 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:17044 errors:0 dropped:0 overruns:0 frame:0 TX packets:14253 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:12594945 (12.5 MB) TX bytes:1902456 (1.9 MB) Interrupt:20 Memory:f7c00000-f7c20000
lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:65536 Metric:1 RX packets:4 errors:0 dropped:0 overruns:0 frame:0 TX packets:4 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:240 (240.0 B) TX bytes:240 (240.0 B)
------------------------------------------------------------------- root@:~# virsh net-start default error: Failed to start network default error: failed to add iptables rule to enable masquerading
root@:~# virsh net-list --all Name State Autostart ----------------------------------------- default inactive yes
root@:~# virsh net-start default error: Failed to start network default error: failed to add iptables rule to enable masquerading
seems like your kernel doesn't have ipt_MASQUERADE installed. try modprobe ipt_MASQUERADE
Hi Gao, Yes , it looks like I am missing more module. I will recompile the kernel and test more, the following is the reason behind this issue. root@:~# tail /var/log/libvirt/libvirtd.log 2013-11-22 07:43:06.388+0000: 4328: error : virCommandWait:2192 : internal error Child process (/sbin/iptables --table nat --insert POSTROUTING --source 192.168.122.0/24 ! --destination 192.168.122.0/24 --jump MASQUERADE) status unexpected: exit status 3 2013-11-22 07:43:06.388+0000: 4328: error : networkAddMasqueradingIptablesRules:966 : failed to add iptables rule to enable masquerading root@:~# /sbin/iptables --table nat --insert POSTROUTING --source 192.168.122.0/24 ! --destination 192.168.122.0/24 --jump MASQUERADE iptables v1.4.12: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. root@# find /lib/modules/`uname -r` -iname "ipt*.ko" /lib/modules/3.12.0-zilonus/kernel/net/ipv4/netfilter/ipt_ULOG.ko /lib/modules/3.12.0-zilonus/kernel/net/ipv4/netfilter/ipt_REJECT.ko /lib/modules/3.12.0-zilonus/kernel/net/ipv4/netfilter/iptable_raw.ko /lib/modules/3.12.0-zilonus/kernel/net/ipv4/netfilter/iptable_filter.ko /lib/modules/3.12.0-zilonus/kernel/net/ipv4/netfilter/ipt_CLUSTERIP.ko /lib/modules/3.12.0-zilonus/kernel/net/ipv4/netfilter/ipt_ah.ko /lib/modules/3.12.0-zilonus/kernel/net/ipv4/netfilter/iptable_mangle.ko /lib/modules/3.12.0-zilonus/kernel/net/ipv4/netfilter/iptable_security.ko /lib/modules/3.12.0-zilonus/kernel/net/ipv4/netfilter/ipt_ECN.ko root@~# root@myhome:~# lsmod | grep ipt ipt_REJECT 12541 0 iptable_mangle 12695 0 iptable_filter 12810 0 ip_tables 26952 2 iptable_mangle,iptable_filter x_tables 29804 11 xt_physdev,ip6table_filter,ip6_tables,ebtables,xt_state,ipt_REJECT,xt_CHECKSUM,iptable_mangle,xt_tcpudp,iptable_filter,ip_tables root@:~# modinfo iptable_nat ERROR: modinfo: could not find module iptable_nat root@:~# I will compile the kernel and get back soon. -- -------------------------------------- Sherin A Syslint Technologies Empowering Technology Innovations Call us : (0091) 471 3273 211 AIM : SyslintAIM || MSN : SyslintMSN || Gtalk: SyslintGtalk http://syslint.com/