OpenVZ Forum - RDF feed
type: channel
items: cannot ping internet from within VE
items: Re: cannot ping internet from within VE

cannot ping internet from within VE
type: item
description: I have a few VE's setup, none of which seem to be able to reach the internet. They can all ping each other and VE0, but nothing outside. I hope I post enough information. /etc/vz/conf/10104.conf NUMPROC="2552:2552" AVNUMPROC="1276:1276" NUMTCPSOCK="2552:2552" NUMOTHERSOCK="2552:2552" VMGUARPAGES="106535:9223372036854775807" KMEMSIZE="104566476:115023123" TCPSNDBUF="24402500:34855492" TCPRCVBUF="24402500:34855492" OTHERSOCKBUF="12201250:22654242" DGRAMRCVBUF="12201250:12201250" OOMGUARPAGES="106535:9223372036854775807" PRIVVMPAGES="639210:703131" LOCKEDPAGES="5105:5105" SHMPAGES="63921:63921" PHYSPAGES="0:9223372036854775807" NUMFILE="40832:40832" NUMFLOCK="1000:1100" NUMPTY="255:255" NUMSIGINFO="1024:1024" DCACHESIZE="22834205:23519232" NUMIPTENT="125:125" DISKSPACE="936398:1030038" DISKINODES="254089:279499" CPUUNITS="17651" VE_ROOT="/var/lib/vz/root/$VEID" VE_PRIVATE="/var/lib/vz/private/$VEID" OSTEMPLATE="debian-4.0-minimal" ORIGIN_SAMPLE="my-16" IP_ADDRESS="192.168.10.104" HOSTNAME="etch-lab" NAMESERVER="203.0.178.191" SEARCHDOMAIN="thorpesystems.local" ONBOOT="yes" NAME="etch-lab" /etc/sysctl.conf kernel.printk = 4 4 1 7 net.ipv4.conf.default.proxy_arp = 0 net.ipv4.ip_forward = 1 net.ipv4.conf.all.rp_filter = 1 kernel.sysrq = 1 net.ipv4.conf.default.send_redirects = 1 net.ipv4.conf.all.send_redirects = 0 And my iptables rules on VE0. Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Do you need more info? Where should I start? My VE0 has no problems pinging the internet.
creator: thorpe
date: 2008-06-06T00:06:04-00:00

Re: cannot ping internet from within VE
type: item
description: Hi, it's necessary to know your network configuration: (as I can see your VE has private IP) if your HN has public IP look at this page http://wiki.openvz.org/Using_NAT_for_container_with_private_ IPs Anyway, please look here http://forum.openvz.org/index.php?t=tree&goto=27545& #msg_27545 Thank You!
creator: maratrus
date: 2008-06-06T08:43:17-00:00

Re: cannot ping internet from within VE
type: item
description: My HN is actually within the same network with an ip address of 192.168.10.2 Here are a few details from the HN. thorpe@oblivion ~ # sudo ifconfig lo Link encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:96 errors:0 dropped:0 overruns:0 frame:0 TX packets:96 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:8164 (7.9 KiB) TX bytes:8164 (7.9 KiB) venet0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 UP BROADCAST POINTOPOINT RUNNING NOARP MTU:1500 Metric:1 RX packets:248498 errors:0 dropped:0 overruns:0 frame:0 TX packets:114369 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:17486738 (16.6 MiB) TX bytes:10247348 (9.7 MiB) wlan0 Link encap:Ethernet HWaddr 00:1c:f0:89:f5:10 inet addr:192.168.10.2 Bcast:192.255.255.255 Mask:255.0.0.0 inet6 addr: fe80::21c:f0ff:fe89:f510/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:227400 errors:0 dropped:0 overruns:0 frame:0 TX packets:490967 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:68627472 (65.4 MiB) TX bytes:39396100 (37.5 MiB) wmaster0 Link encap:UNSPEC HWaddr 00-1C-F0-89-F5-10-00-00-00-00-00-00-00-00-00-00 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 B) TX bytes:0 (0.0 B) thorpe@oblivion ~ # ip route list table all 192.168.10.104 dev venet0 scope link src 192.168.10.2 192.168.10.105 dev venet0 scope link src 192.168.10.2 192.168.10.106 dev venet0 scope link src 192.168.10.2 192.168.10.100 dev venet0 scope link src 192.168.10.2 192.168.10.101 dev venet0 scope link src 192.168.10.2 192.168.10.102 dev venet0 scope link src 192.168.10.2 192.168.10.103 dev venet0 scope link src 192.168.10.2 192.0.0.0/8 dev wlan0 proto kernel scope link src 192.168.10.2 defaul…
creator: thorpe
date: 2008-06-09T07:10:52-00:00

Re: cannot ping internet from within VE
type: item
description: Hi, Quote: Obviously, without an internet connection I can't install ip on the VE. Why don't you download appropriate package on the HN and then move it into VE and install it there? Or you can use "route" utility and "ifconfig" command inside VE. Please show us the route table and ifconfig output from inside the VE. Could you possibly show also "arp -n" on the HN? And if it is possible what is the output of the "tcpdump" utility. Try to ping something from inside the VE (ping x.x.x.x) and then show the output of "tcpdump" from HN and from VE.
creator: maratrus
date: 2008-06-09T08:31:43-00:00