Problems accessing floating ip from another project

[Валерия Валерьевна Швецова]

Description
===========
I have deployed OpenStack Stein using TripleO. Then I've created external shared network "ext_net" in "admin" project and checked it in that project (by attaching floating ip from this network to the instance). After that I've created another project "sandbox", internal network "test_net" in it, router from "test_net" to "ext_net" and launched instance "t_instance". Attaching floating ip from "ext_net" to "t_instance" run successfully. But I can't ping or ssh "t_instance" by that floating ip (security groups were also checked).

Steps to reproduce
==================
* Create external network (name:"ext_net", type:vlan, provider:datacentre, segmentation_id:450, external:true, shared:true, cidr:10.100.148.0/22, gateway:10.100.151.254, dhcp:true, allocation_pool:10.100.148.20,10.100.148.240)
* Create project "sandbox", further all actions are made in this project
* Create security group "ssh_access" with rules: ingress ssh from 0.0.0.0/0 and ingress all_icmp
* Create internal network (name: "test_net", type:geneve, segmentation_id:666, external:false, shared:false, cidr:192.168.20.0/22, gateway:auto, dhcp:true, allocation_pool:192.168.20.20,192.168.20.240)
* Create router "test_r" with external_gateway:ext_net and interfaces:test_net
* Launch instance "t_instance" with network:test_net, security_group:ssh_access, image:cirros-1.4.0, flavor:f2.micro
* Attach floating ip 10.100.148.33 to "t_instance"
* ping 10.100.148.33: stuck
* ping 10.100.148.20 (ip address of router "test_r"): success

Expected result
===============
ping 10.100.148.33 successfully

Actual result
=============
ping 10.100.148.33 stuck

Environment
===========

OpenStack Stein deployed by Tripleo using openstack-tripleo-heat-templates-10.5.1-0.20190529155905.2eb4734.el7.noarch

[wes hayutin (weshayutin)]

Need more information from the logs in the containers to really help here.