openstack/openstack-manuals
Code Issues Proposed changes

fix erroneous command in cloud admin guide

Browse Source 
I believe that the initial "iptables -L -nv" command in this section is
erroneous and should simply be dropped.

The task is:

  Ensure the NAT rules have been added to iptables on the node that
  nova-network is running on, as root

NAT rules only exist in the iptables nat table.  There are two commands
following this task; the first one (removed by this patch) refers to the
*filter* table and shows impossible output (the filter table cannot
contain a DNAT rule).

The second iptables command correctly specifies "-t nat" and appears to
contain the same information as the impossible output from the previous
command.

Change-Id: I8dce50b6e1a1e42ff3955ecb3fbc612cd4a9f074
Closes-bug: 1294196
This commit is contained in:
Lars Kellogg-Stedman 2014-03-31 11:41:42 -04:00
parent 01f4660a7c
commit d693bae65f
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/admin-guide-cloud/compute/section_compute-networking-nova.xml
View File

@ -688,10 +688,8 @@ iface eth1 inet dhcp</programlisting>
</listitem> </listitem>
<listitem><para>Ensure the NAT rules have been added to <systemitem>iptables</systemitem> on the node that <listitem><para>Ensure the NAT rules have been added to <systemitem>iptables</systemitem> on the node that
<systemitem>nova-network</systemitem> is running on, as root:</para> <systemitem>nova-network</systemitem> is running on, as root:</para>
<screen><prompt>#</prompt> <userinput>iptables -L -nv</userinput>
<computeroutput>-A nova-network-OUTPUT -d 68.99.26.170/32 -j DNAT --to-destination 10.0.0.3</computeroutput></screen>
<screen><prompt>#</prompt> <userinput>iptables -L -nv -t nat</userinput> <screen><prompt>#</prompt> <userinput>iptables -L -nv -t nat</userinput>
<computeroutput>-A nova-network-PREROUTING -d 68.99.26.170/32 -j DNAT --to-destination10.0.0.3 <computeroutput>-A nova-network-PREROUTING -d 68.99.26.170/32 -j DNAT --to-destination 10.0.0.3
-A nova-network-floating-snat -s 10.0.0.3/32 -j SNAT --to-source 68.99.26.170</computeroutput></screen></listitem> -A nova-network-floating-snat -s 10.0.0.3/32 -j SNAT --to-source 68.99.26.170</computeroutput></screen></listitem>
<listitem><para>Check that the public address, in this example "68.99.26.170", has been added to your public <listitem><para>Check that the public address, in this example "68.99.26.170", has been added to your public
interface. You should see the address in the listing when you enter "ip interface. You should see the address in the listing when you enter "ip