[gentoo-user-ru] KVM. Не работает сеть меджу гостевыми машинами

[Alexander Tiurin]

Приветствую!
Есть два гостя в kvm (Guet1 и  Guest2). Не работет сеть между
eth0(Guest1) и eth0(Guest2). Трэйс затыкается на первом хопе,

Guest2~: traceroute -n 192.168.100.2
traceroute to 192.168.100.2 (192.168.100.2), 30 hops max, 40 byte packets
 1  192.168.100.10  3000.350 ms !H  3000.346 ms !H  3000.339 ms !H

Аналогичная ситуация с трейсом на Guest1 до Guest2.  При этом связь
между host и всеми guest машинами работает нормально в обе стороны.
Схема такая:



/---tap0(host)---eth0(Guest1)
world---eth0(Host)----NAT----br0(Host)

\---tap1(host)---eth0(Guest2)


 В какую сторону копать, что бы пофиксить ситуацию?




Конфиги на host
--
sysctl -p

net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.bridge.bridge-nf-call-arptables = 0
net.bridge.bridge-nf-call-iptables = 0
net.bridge.bridge-nf-call-ip6tables = 0

--
net

config_eth0=( "dhcp" )

bridge_br0="tap0 tap1"
brctl_br0=( "setfd 0" "sethello 0" "stp off" )
rc_need_br0="net.tap0 net.tap1"

config_br0=( "192.168.100.254/24" )

config_tap0=( "null" )
tuntap_tap0="tap"
tunctl_tap0="-u user"
mac_tap0="52:54:00:12:34:56"

config_tap1=( "null" )
tuntap_tap1="tap"
tunctl_tap1="-u user"
mac_tap1="52:54:00:12:34:59"

--

ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast
state UP qlen 1000
    link/ether 00:1d:60:40:54:e5 brd ff:ff:ff:ff:ff:ff
    inet 77.37.199.58/23 brd 77.37.199.255 scope global eth0
    inet6 fe80::21d:60ff:fe40:54e5/64 scope link
       valid_lft forever preferred_lft forever
3: vboxnet0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether 0a:00:27:00:00:00 brd ff:ff:ff:ff:ff:ff
33: tap0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast state UNKNOWN qlen 100
    link/ether 52:54:00:12:34:56 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::5054:ff:fe12:3456/64 scope link
       valid_lft forever preferred_lft forever
34: tap1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc
pfifo_fast state UNKNOWN qlen 100
    link/ether 52:54:00:12:34:59 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::5054:ff:fe12:3459/64 scope link
       valid_lft forever preferred_lft forever
37: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
    link/ether 52:54:00:12:34:56 brd ff:ff:ff:ff:ff:ff
    inet 192.168.100.254/24 brd 192.168.100.255 scope global br0
    inet6 fe80::5054:ff:fe12:3456/64 scope link
       valid_lft forever preferred_lft forever

---

iptables-save


# Generated by iptables-save v1.4.3.2 on Sun Mar 28 16:59:59 2010
*filter
:INPUT ACCEPT [1038357488:450288049946]
:FORWARD ACCEPT [787:57190]
:OUTPUT ACCEPT [884438851:1350759607118]
COMMIT
# Completed on Sun Mar 28 16:59:59 2010
# Generated by iptables-save v1.4.3.2 on Sun Mar 28 16:59:59 2010
*nat
:PREROUTING ACCEPT [725620:66419189]
:POSTROUTING ACCEPT [635199:52012933]
:OUTPUT ACCEPT [677535:55428733]
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT


---

kvm_guest1='kvm -M pc-0.11 -m 1024  -usbdevice mouse -vga "std" -cpu
core2duo -soundhw ac97  -smp 2 -drive
file=./centos.img,if=virtio,boot=on -net
nic,model=virtio,macaddr=52:54:00:12:34:56 -net
tap,ifname=tap0,script=no -cdrom /dev/cdrom -boot c &'

kvm_guest2='kvm -M pc-0.11 -m 1024  -usbdevice mouse -vga "std" -cpu
core2duo -soundhw ac97  -smp 2 -drive
file=./opensuse11-3.img,if=virtio,boot=on -net
nic,model=virtio,macaddr=52:54:00:12:34:59 -net
tap,ifname=tap1,script=no -cdrom /dev/cdrom -boot c &'