| Summary: | OVS-firewall: There is no connectivity to instance after updating " admin_state_up " from false to True | ||
|---|---|---|---|
| Product: | Red Hat OpenStack | Reporter: | Eran Kuris <ekuris> |
| Component: | openstack-neutron | Assignee: | Assaf Muller <amuller> |
| Status: | CLOSED WORKSFORME | QA Contact: | GenadiC <gcheresh> |
| Severity: | high | Docs Contact: | |
| Priority: | low | ||
| Version: | 9.0 (Mitaka) | CC: | amuller, chrisw, ekuris, gcheresh, jlibosva, nyechiel, srevivo, tfreger |
| Target Milestone: | --- | Keywords: | ZStream |
| Target Release: | 9.0 (Mitaka) | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-05-03 13:55:06 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Eran Kuris
2016-04-17 12:33:12 UTC
Jakub can you look in to this? Thank you. rhos-9.0 Works for me: [root@centos7-rdo versions(keystone_admin)]# neutron port-show -c status 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 +--------+--------+ | Field | Value | +--------+--------+ | status | ACTIVE | +--------+--------+ [root@centos7-rdo versions(keystone_admin)]# neutron port-show -c status,id 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 [root@centos7-rdo versions(keystone_admin)]# neutron port-show -c status -c id 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 +--------+--------------------------------------+ | Field | Value | +--------+--------------------------------------+ | id | 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 | | status | ACTIVE | +--------+--------------------------------------+ [root@centos7-rdo versions(keystone_admin)]# ovs-vsctl get Port tap21ccfb0e-a9 tag 1 [root@centos7-rdo versions(keystone_admin)]# ip net e qdhcp-faefcb03-dab7-465e-80f4-f4ad449a3899 ping 192.168.0.3 -c 2 PING 192.168.0.3 (192.168.0.3) 56(84) bytes of data. 64 bytes from 192.168.0.3: icmp_seq=1 ttl=64 time=1.41 ms 64 bytes from 192.168.0.3: icmp_seq=2 ttl=64 time=0.593 ms --- 192.168.0.3 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1001ms rtt min/avg/max/mdev = 0.593/1.004/1.415/0.411 ms [root@centos7-rdo versions(keystone_admin)]# neutron port-update --admin-state-up=False 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 Updated port: 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 [root@centos7-rdo versions(keystone_admin)]# neutron port-show -c status -c id 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 +--------+--------------------------------------+ | Field | Value | +--------+--------------------------------------+ | id | 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 | | status | DOWN | +--------+--------------------------------------+ [root@centos7-rdo versions(keystone_admin)]# ip net e qdhcp-faefcb03-dab7-465e-80f4-f4ad449a3899 ping 192.168.0.3 -c 2 PING 192.168.0.3 (192.168.0.3) 56(84) bytes of data. --- 192.168.0.3 ping statistics --- 2 packets transmitted, 0 received, 100% packet loss, time 999ms [root@centos7-rdo versions(keystone_admin)]# ovs-vsctl get Port tap21ccfb0e-a9 tag 4095 [root@centos7-rdo versions(keystone_admin)]# neutron port-update --admin-state-up=True 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 Updated port: 21ccfb0e-a98b-4b3f-8f27-ad180ebf6756 [root@centos7-rdo versions(keystone_admin)]# ovs-vsctl get Port tap21ccfb0e-a9 tag 1 [root@centos7-rdo versions(keystone_admin)]# ip net e qdhcp-faefcb03-dab7-465e-80f4-f4ad449a3899 ping 192.168.0.3 -c 2 PING 192.168.0.3 (192.168.0.3) 56(84) bytes of data. 64 bytes from 192.168.0.3: icmp_seq=1 ttl=64 time=1.87 ms 64 bytes from 192.168.0.3: icmp_seq=2 ttl=64 time=0.500 ms --- 192.168.0.3 ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1001ms rtt min/avg/max/mdev = 0.500/1.188/1.877/0.689 ms As per output above admin-state-up=False puts port into dead vlan with tag 4095. Eran, can you please make sure vlan tags are correct before you set admin state up to False, after you set it to False and after you set it back to True? Can you track where are the packets dropped? Tried it on CentOS Linux release 7.2.1511 with kernel 4.5.2-1.el7.elrepo.x86_64 and everything work as expected |