Description of problem:
ipv6 vxlan tenant based Instance cannot ping Instance from another tenant over a neutron router.
2 tenant subnets were created with ipv6 addressing mode as 'dhcpv6-stateful' & have a port on a ha router.
Each instance was able to ping the IP of other tenant subnet's port which is on router. & the vice-versa is true.
Although instance could not ping other tenant subnet's gateway or the other guest.
We noticed that ipv6 forwarding was disabled in the qrouter namespace.
sudo ip netns exec qrouter-3345aeb1-c4a9-4e43-b2d6-e41929d1ff6f sysctl net.ipv6.conf.all.forwarding
After enabling this, ping works well.
sudo ip netns exec qrouter-3345aeb1-c4a9-4e43-b2d6-e41929d1ff6f sysctl -w net.ipv6.conf.all.forwarding=1
Version-Release number of selected component (if applicable):
RHOS10
neutron 9.4.1-28
How reproducible:
Always in customer environment
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHSA-2019:0916
Comment 28Bernard Cafarelli
2019-06-24 13:59:13 UTC
*** Bug 1694849 has been marked as a duplicate of this bug. ***