問題
當我們在嘗試使用普通用戶創建虛擬機的時候，有可能會出現如下報錯：
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [req-2729a7d4-5e3f-4a49-9d87-baf2d6d443b6 9e8214952e6a4db1892a822c4934a01e ebcba068e7ff4e499dd6dcb4e21faf08 - default default] [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] Instance failed to spawn: ExternalNetworkAttachForbidden: It is not allowed to create an interface on external network 8bc8d203-7a28-4a72-9fb4-297fd7de5c26
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] Traceback (most recent call last):
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2203, in _build_resources
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] yield resources
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2018, in _build_and_run_instance
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] block_device_info=block_device_info)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/virt/libvirt/driver.py", line 2898, in spawn
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] block_device_info=block_device_info)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/virt/libvirt/driver.py", line 5206, in _get_guest_xml
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] network_info_str = str(network_info)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/network/model.py", line 565, in __str__
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] return self._sync_wrapper(fn, *args, **kwargs)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/network/model.py", line 548, in _sync_wrapper
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] self.wait()
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/network/model.py", line 580, in wait
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] self[:] = self._gt.wait()
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/eventlet/greenthread.py", line 175, in wait
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] return self._exit_event.wait()
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/eventlet/event.py", line 125, in wait
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] current.throw(*self._exc)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/eventlet/greenthread.py", line 214, in main
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] result = function(*args, **kwargs)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/utils.py", line 1004, in context_wrapper
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] return func(*args, **kwargs)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 1449, in _allocate_network_async
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] six.reraise(*exc_info)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 1432, in _allocate_network_async
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] bind_host_id=bind_host_id)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line 858, in allocate_for_instance
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] context, instance, neutron, requested_networks, ordered_networks)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line 747, in _validate_requested_network_ids
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] self._check_external_network_attach(context, nets)
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] File "/usr/lib/python2.7/site-packages/nova/network/neutronv2/api.py", line 487, in _check_external_network_attach
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] network_uuid=net['id'])
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd] ExternalNetworkAttachForbidden: It is not allowed to create an interface on external network 8bc8d203-7a28-4a72-9fb4-297fd7de5c26
2019-09-25 12:44:29.993 362 ERROR nova.compute.manager [instance: 7d357fd1-500a-4d54-8d6a-7c96344610fd]
報錯主要問題：
ExternalNetworkAttachForbidden: It is not allowed to create an interface on external network
描述過來就是：
外部網路連接拒絕：不容許在外部網絡創建端口
原因
openstack在設計的時候，網絡設計上，外部網絡是由管理員來創建和管理的。在L3模型下面，普通用戶可以在管理員提供的public網絡下面創建內部網絡。二不容許直接使用public網絡來創建虛擬機。
所以，如果在L2模型下面，管理員創建的網絡理論上都是公共網絡，如果在創建網絡的時候勾選了–外部網絡–選項的話，就會導致普通用戶（角色非admin）無法使用該虛擬機創建網絡。
解決方法
在創建網絡的時候，不勾選–外部網絡–選項。