openstack/openstack-manuals
Code Issues Proposed changes

fix erroneous command in cloud admin guide

Browse Source 
I believe that the initial "iptables -L -nv" command in this section is
erroneous and should simply be dropped.

The task is:

  Ensure the NAT rules have been added to iptables on the node that
  nova-network is running on, as root

NAT rules only exist in the iptables nat table.  There are two commands
following this task; the first one (removed by this patch) refers to the
*filter* table and shows impossible output (the filter table cannot
contain a DNAT rule).

The second iptables command correctly specifies "-t nat" and appears to
contain the same information as the impossible output from the previous
command.

Change-Id: I8dce50b6e1a1e42ff3955ecb3fbc612cd4a9f074
Closes-bug: 1294196
This commit is contained in:
Lars Kellogg-Stedman 2014-03-31 11:41:42 -04:00
parent 01f4660a7c
commit d693bae65f
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/admin-guide-cloud/compute/section_compute-networking-nova.xml
View File

@ -688,10 +688,8 @@ iface eth1 inet dhcp</programlisting>
</listitem>
<listitem><para>Ensure the NAT rules have been added to <systemitem>iptables</systemitem> on the node that
<systemitem>nova-network</systemitem> is running on, as root:</para>
<screen><prompt>#</prompt> <userinput>iptables -L -nv</userinput>
<computeroutput>-A nova-network-OUTPUT -d 68.99.26.170/32 -j DNAT --to-destination 10.0.0.3</computeroutput></screen>
<screen><prompt>#</prompt> <userinput>iptables -L -nv -t nat</userinput>
<computeroutput>-A nova-network-PREROUTING -d 68.99.26.170/32 -j DNAT --to-destination10.0.0.3
<computeroutput>-A nova-network-PREROUTING -d 68.99.26.170/32 -j DNAT --to-destination 10.0.0.3
-A nova-network-floating-snat -s 10.0.0.3/32 -j SNAT --to-source 68.99.26.170</computeroutput></screen></listitem>
<listitem><para>Check that the public address, in this example "68.99.26.170", has been added to your public
interface. You should see the address in the listing when you enter "ip