# Networking Issues

This article describes the common Managed OpenStack network related problems, the probable causes and the troubleshooting tips to resolve the problems.

{% hint style="success" %}
**Tip**

Ensure that you have read through this article before contacting Platform9 support to resolve an OpenStack network related problem.
{% endhint %}

## Problem: I am unable to ping a virtual machine or log in to a virtual machine

If you are unable ping a virtual machine (VM) or you are having a problem with logging in to a VM, the following are the potential causes.

* The VM does not have an IP address.
* Security groups have not been configured to allow inbound traffic.
* There is a problem with Layer 2 connectivity.

### Troubleshooting Steps

The following table lists the steps to troubleshoot the above-mentioned problems.

| Steps                                                                                                                                                                                                                                                                                 | Remarks                                                                                                                                     | Remediation                                                                                                           |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
| <p>Check the network and the type of network that the VM is running on.<br>Check the security groups configured for the network to see if the security groups allow inbound traffic to the VM.</p>                                                                                    | If no security groups have been configured, the default security group is applied. The default security group allows only outbound traffic. | Configure a security group that allows inbound traffic from outside of the subnet to the VM.                          |
| Check from within the VM if the VM has an IP address.                                                                                                                                                                                                                                 | If the VM does not have an IP address, there could be a problem with the DHCP service.                                                      | Contact [Platform9 support](https://platform9.zendesk.com/hc/en-us) for further troubleshooting.                      |
| Ping another VM that is on the same network and the same host.                                                                                                                                                                                                                        | If you are unable to get a response from the other VM, there is a problem with the OVS agent.                                               | <p>Restart the OVS agent by running the following command.<br><code>service pf9-neutron-ovs-agent restart.</code></p> |
| Ping another VM that is on the same network, but on a different host.                                                                                                                                                                                                                 | If you are unable to get a response, there is a problem with the physical network.                                                          | Contact [Platform9 support](https://platform9.zendesk.com/hc/en-us) for further troubleshooting.                      |
| <p>Check the router settings in Clarity under Networks>Routers>Edit Router.<br>Check if the router has a subnet interface on which the VM is running. Ensure that an external router has been assigned.<br>Ensure that the ports are active.<br>Ping the external router gateway.</p> | These steps are applicable only when you are unable to log in to a VM.                                                                      | Contact [Platform9 support](https://platform9.zendesk.com/hc/en-us) for further troubleshooting.                      |

## Problem: Port Binding Fails

If you encounter an issue where ports are in the "VIF Binding Failed" state, isolate the problem and contact [Platform9 support](https://platform9.zendesk.com/hc/en-us).

<figure><img src="https://2491133324-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FTp3vmrOuO3dQilOzN2fE%2Fuploads%2Fgit-blob-fb5c2ae5e73a32dfc5252de14821aa64c0dd5ac0%2F1605302301.png?alt=media" alt=""><figcaption></figcaption></figure>

Use the following steps to isolate the problem and contact Platform9 support for further troubleshooting.

* Check if all port bindings for the network have failed.
* Check if the port binding fails for all new VMs or a subset of Hypervisors.
* Check if the port binding fails for new VMs on one host only. If this problem exists, restart OVS agent by running the following command.

{% tabs %}
{% tab title="Bash" %}

```bash
service pf9-neutron-ovs-agent restart
```

{% endtab %}
{% endtabs %}

Then contact [Platform9 support](https://platform9.zendesk.com/hc/en-us)