[Lxc-users] Network Connectivity problem

[Dwight Engen]

On Mon, 04 Mar 2013 15:35:06 -0600
"cbulist at gmail.com" <cbulist at gmail.com> wrote:

> Hi All,
> 
> 
> We have a host server running Oracle Linux
> (2.6.39-200.24.1.el6uek.x86_64) and We created a Oracle Linux 6.2
> container following Oracle's Docs
> (http://docs.oracle.com/cd/E37670_01/E37355/html/ol_config_os_containers.html).
> The installation process was OK and We did not have any problem. We
> are able to connect to it using lxc-console. The problem is that we
> don't have any connectivity to the public or private network from our
> container (We have just connectivity to our host IP address). Our
> host has full connectivity to both networks.
> 
> These are the relevant network file configuration:
> 
> Host info:
> 
>      - ifcfg-eth0
> 
> DEVICE="eth0"
> HWADDR=00:0C:29:1B:46:20
> ONBOOT=yes
> BRIDGE="virbr0"
> NM_CONTROLLED="no"
> 
>      -ifcfg-virbr0
> 
> DEVICE="virbr0"
> TYPE=Bridge
> BRIDGE_FORWARDDELAY=0
> NM_CONTROLLED="no"
> ONBOOT="yes"
> BOOTPROTO=static
> IPADDR=192.168.1.222
> NETMASK=255.255.255.0
> GATEWAY=192.168.1.1
> HWADDR=00:0C:29:1B:46:20
> 
> 
> Container info:
> 
>      - ifcfg-eth0
> 
> DEVICE=eth0
> BOOTPROTO="static"
> ONBOOT=yes
> HOSTNAME=ol6ctr1
> NM_CONTROLLED=no
> TYPE=Ethernet
> IPADDR=192.168.1.223
> HARDWARE=3E:E3:2D:8B:47:17
> NETMASK=255.255.255.0
> 
>      -/etc/sysconfig/network
> 
> NETWORKING=yes
> NETWORKING_IPV6=no
> GATEWAY=192.168.1.1
> HOSTNAME=ol6ctr1
> 
> 
> [root at ol6ctr1 ~]# route -n
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref
> Use Iface
> 0.0.0.0         192.168.1.1      0.0.0.0         UG    0
> 0        0 eth0 192.168.1.0      0.0.0.0         255.255.255.0
> U     0      0        0 eth0 169.254.0.0     0.0.0.0
> 255.255.0.0     U     1007   0        0 eth0
> 
>    -selinux: disabled
>    -iptables stopped

I believe your problem is because iptables needs to not be stopped for
the NAT forwarding rules to work and forward your traffic.

> I really appreciate any help about this problem.
> 
> Thanks in advance!