RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1855160 - Got failure when change bridge multicast-snooping from false to true
Summary: Got failure when change bridge multicast-snooping from false to true
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: nmstate
Version: 8.3
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: 8.4
Assignee: Fernando F. Mancera
QA Contact: Mingyu Shi
URL:
Whiteboard:
Depends On: 1859244
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-07-09 06:28 UTC by Mingyu Shi
Modified: 2021-05-18 15:18 UTC (History)
6 users (show)

Fixed In Version: nmstate-1.0.0-1.el8
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-05-18 15:16:54 UTC
Type: Bug
Target Upstream Version:
Embargoed:
pm-rhel: mirror+

Attachments (Terms of Use)

Description Mingyu Shi 2020-07-09 06:28:11 UTC 
Description of problem:
Got failure when change bridge multicast-snooping from false to true

Version-Release number of selected component (if applicable):
nmstate-0.3.3-2.el8.noarch
NetworkManager-1.26.0-0.2.1.el8.x86_64
DISTRO=RHEL-8.3.0-20200709.n.0
Linux hpe-dl380pgen8-02-vm-7.hpe2.lab.eng.bos.redhat.com 4.18.0-223.el8.x86_64 #1 SMP Tue Jul 7 12:56:57 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux


How reproducible:
Very high

Steps to Reproduce:
1. See "Additional info"
2.
3.

Actual results:
Fail

Expected results:
No failure

Additional info:
See reproducer:
# bridge_traffic_test
ip netns add client
ip netns add server
ip link add veth0_c type veth peer name veth0_c_p
ip link add veth0_s type veth peer name veth0_s_p
ip link set veth0_c_p netns client
ip link set veth0_s_p netns server
ip netns exec client ip link set lo up
ip netns exec client ip link set veth0_c_p up
ip netns exec client ip addr add 192.168.0.1/24 dev veth0_c_p
ip netns exec client ip addr add 2000::1/64 dev veth0_c_p
ip netns exec server ip  link set lo up
ip netns exec server ip  link set veth0_s_p up
ip netns exec server ip addr add 192.168.0.2/24 dev veth0_s_p
ip netns exec server ip -6 addr add 2000::2/64 dev veth0_s_p
nmcli device set veth0_c managed yes
nmcli device set veth0_s managed yes
cat > br_test.yaml << EOF
---
interfaces:
- name: veth0_c
  type: ethernet
  state: up
  ipv4:
    enabled: false
  ipv6:
    enabled: false
  mtu: 1500
- name: veth0_s
  type: ethernet
  state: up
  ipv4:
    enabled: false
  ipv6:
    enabled: false
  mtu: 1500
- name: br_test
  type: linux-bridge
  description: br_test
  state: up
  bridge:
    options:
      group-forward-mask: 0
      mac-ageing-time: 300
      multicast-snooping: true
      stp:
        enabled: false
        forward-delay: 15
        hello-time: 2
        max-age: 20
        priority: 32768
    port:
        - name: veth0_c
          stp-hairpin-mode: false
          stp-path-cost: 100
          stp-priority: 32
        - name: veth0_s
          stp-hairpin-mode: false
          stp-path-cost: 100
          stp-priority: 32
  ipv4:
    dhcp: false
    enabled: true
    address:
    - ip: 192.168.0.254
      prefix-length: 24
  ipv6:
    dhcp: false
    enabled: true
    address:
    - ip: 2000::a
      prefix-length: 64
  mac-address: AA:CF:A8:2D:6A:48
  mtu: 1500
EOF

# repeat the commands below to reproduce:
sed 's/multicast-snooping: true/multicast-snooping: false/' br_test.yaml | nmstatectl set
sleep 2
nmstatectl set br_test.yaml

# error log:
2020-07-09 14:25:15,843 root         DEBUG    Async action: Create checkpoint started
2020-07-09 14:25:15,848 root         DEBUG    Checkpoint None created for all devices
2020-07-09 14:25:15,848 root         DEBUG    Async action: Create checkpoint finished
2020-07-09 14:25:15,851 root         DEBUG    Async action: Update profile: br_test started
2020-07-09 14:25:15,852 root         DEBUG    Async action: Update profile: veth0_c started
2020-07-09 14:25:15,853 root         DEBUG    Async action: Update profile: veth0_s started
2020-07-09 14:25:15,856 root         DEBUG    Async action: Update profile: br_test finished
2020-07-09 14:25:15,858 root         DEBUG    Async action: Update profile: veth0_c finished
2020-07-09 14:25:15,860 root         DEBUG    Async action: Update profile: veth0_s finished
2020-07-09 14:25:15,860 root         DEBUG    Async action: Reapply device config: br_test started
2020-07-09 14:25:15,862 root         DEBUG    Device reapply failed on br_test: error=nm-device-error-quark: Can't reapply any changes to 'bridge' setting (3)
Fallback to device activation
2020-07-09 14:25:15,863 root         DEBUG    Async action: Activate profile: br_test started
2020-07-09 14:25:15,870 root         DEBUG    Connection activation initiated: dev=br_test, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState>
2020-07-09 14:25:15,927 root         DEBUG    Connection activation succeeded: dev=br_test, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_IP_CONFIG of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_MASTER | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_MASTER_HAS_SLAVES of type NM.ActivationStateFlags>
2020-07-09 14:25:15,928 root         DEBUG    Async action: Activate profile: br_test finished
2020-07-09 14:25:15,956 root         DEBUG    Async action: Activate profile: veth0_c started
2020-07-09 14:25:15,968 root         DEBUG    Async action: Activate profile: veth0_s started
2020-07-09 14:25:15,970 root         DEBUG    Connection activation initiated: dev=veth0_c, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState>
2020-07-09 14:25:15,994 root         DEBUG    Connection activation succeeded: dev=veth0_c, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATED of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_ACTIVATED of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_SLAVE | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_IP4_READY | NM_ACTIVATION_STATE_FLAG_IP6_READY of type NM.ActivationStateFlags>
2020-07-09 14:25:15,994 root         DEBUG    Async action: Activate profile: veth0_c finished
2020-07-09 14:25:15,995 root         DEBUG    Connection activation initiated: dev=veth0_s, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState>
2020-07-09 14:25:16,019 root         DEBUG    Connection activation succeeded: dev=veth0_s, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATED of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_ACTIVATED of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_SLAVE | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_IP4_READY | NM_ACTIVATION_STATE_FLAG_IP6_READY of type NM.ActivationStateFlags>
2020-07-09 14:25:16,019 root         DEBUG    Async action: Activate profile: veth0_s finished
2020-07-09 14:25:21,320 root         DEBUG    Async action: Rollback to checkpoint /org/freedesktop/NetworkManager/Checkpoint/36 started
2020-07-09 14:25:21,358 root         DEBUG    Checkpoint /org/freedesktop/NetworkManager/Checkpoint/36 rollback executed
2020-07-09 14:25:21,359 root         DEBUG    Async action: Waiting for rolling back veth0_c started
2020-07-09 14:25:21,359 root         DEBUG    Interface veth0_c rollback succeeded
2020-07-09 14:25:21,359 root         DEBUG    Async action: Waiting for rolling back veth0_s started
2020-07-09 14:25:21,359 root         DEBUG    Interface veth0_s rollback succeeded
2020-07-09 14:25:21,359 root         DEBUG    Async action: Waiting for rolling back br_test started
2020-07-09 14:25:21,359 root         DEBUG    Interface br_test rollback succeeded
2020-07-09 14:25:21,359 root         DEBUG    Interface lo rollback succeeded
2020-07-09 14:25:21,360 root         DEBUG    Interface ens3 rollback succeeded
2020-07-09 14:25:21,360 root         DEBUG    Async action: Rollback to checkpoint /org/freedesktop/NetworkManager/Checkpoint/36 finished
2020-07-09 14:25:21,373 root         DEBUG    Active connection of device None has been replaced
2020-07-09 14:25:21,416 root         DEBUG    Active connection of device None has been replaced
2020-07-09 14:25:21,417 root         DEBUG    Connection activation succeeded: dev=br_test, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATING of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_IP_CONFIG of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_MASTER | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_MASTER_HAS_SLAVES of type NM.ActivationStateFlags>
2020-07-09 14:25:21,418 root         DEBUG    Async action: Waiting for rolling back br_test finished
2020-07-09 14:25:21,418 root         DEBUG    Active connection of device None has been replaced
2020-07-09 14:25:21,447 root         DEBUG    Connection activation succeeded: dev=veth0_c, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATED of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_ACTIVATED of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_SLAVE | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_IP4_READY | NM_ACTIVATION_STATE_FLAG_IP6_READY of type NM.ActivationStateFlags>
2020-07-09 14:25:21,448 root         DEBUG    Async action: Waiting for rolling back veth0_c finished
2020-07-09 14:25:21,503 root         DEBUG    Connection activation succeeded: dev=veth0_s, con-state=<enum NM_ACTIVE_CONNECTION_STATE_ACTIVATED of type NM.ActiveConnectionState>, dev-state=<enum NM_DEVICE_STATE_ACTIVATED of type NM.DeviceState>, state-flags=<flags NM_ACTIVATION_STATE_FLAG_IS_SLAVE | NM_ACTIVATION_STATE_FLAG_LAYER2_READY | NM_ACTIVATION_STATE_FLAG_IP4_READY | NM_ACTIVATION_STATE_FLAG_IP6_READY of type NM.ActivationStateFlags>
2020-07-09 14:25:21,503 root         DEBUG    Async action: Waiting for rolling back veth0_s finished
Traceback (most recent call last):
  File "/usr/bin/nmstatectl", line 11, in <module>
    load_entry_point('nmstate==0.3.3', 'console_scripts', 'nmstatectl')()
  File "/usr/lib/python3.6/site-packages/nmstatectl/nmstatectl.py", line 67, in main
    return args.func(args)
  File "/usr/lib/python3.6/site-packages/nmstatectl/nmstatectl.py", line 256, in apply
    args.save_to_disk,
  File "/usr/lib/python3.6/site-packages/nmstatectl/nmstatectl.py", line 289, in apply_state
    save_to_disk=save_to_disk,
  File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 71, in apply
    _apply_ifaces_state(plugins, net_state, verify_change, save_to_disk)
  File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 115, in _apply_ifaces_state
    _verify_change(plugins, net_state)
  File "/usr/lib/python3.6/site-packages/libnmstate/netapplier.py", line 120, in _verify_change
    net_state.verify(current_state)
  File "/usr/lib/python3.6/site-packages/libnmstate/net_state.py", line 63, in verify
    self._ifaces.verify(current_state.get(Interface.KEY))
  File "/usr/lib/python3.6/site-packages/libnmstate/ifaces/ifaces.py", line 308, in verify
    cur_iface.state_for_verify(),
libnmstate.error.NmstateVerificationError: 
desired
=======
---
name: br_test
type: linux-bridge
state: up
bridge:
  options:
    group-forward-mask: 0
    mac-ageing-time: 300
    multicast-snooping: true
    stp:
      enabled: false
      forward-delay: 15
      hello-time: 2
      max-age: 20
      priority: 32768
  port:
  - name: veth0_c
    stp-hairpin-mode: false
    stp-path-cost: 100
    stp-priority: 32
    vlan: {}
  - name: veth0_s
    stp-hairpin-mode: false
    stp-path-cost: 100
    stp-priority: 32
    vlan: {}
description: br_test
ipv4:
  enabled: true
  address:
  - ip: 192.168.0.254
    prefix-length: 24
  dhcp: false
ipv6:
  enabled: true
  address:
  - ip: 2000::a
    prefix-length: 64
  dhcp: false
mac-address: AA:CF:A8:2D:6A:48
mtu: 1500

current
=======
---
name: br_test
type: linux-bridge
state: up
bridge:
  options:
    group-addr: 01:80:C2:00:00:00
    group-forward-mask: 0
    hash-max: 4096
    mac-ageing-time: 300
    multicast-last-member-count: 2
    multicast-last-member-interval: 100
    multicast-querier: false
    multicast-querier-interval: 25500
    multicast-query-interval: 12500
    multicast-query-response-interval: 1000
    multicast-query-use-ifaddr: false
    multicast-router: 1
    multicast-snooping: false
    multicast-startup-query-count: 2
    multicast-startup-query-interval: 3125
    stp:
      enabled: false
      forward-delay: 15
      hello-time: 2
      max-age: 20
      priority: 32768
  port:
  - name: veth0_c
    stp-hairpin-mode: false
    stp-path-cost: 100
    stp-priority: 32
    vlan: {}
  - name: veth0_s
    stp-hairpin-mode: false
    stp-path-cost: 100
    stp-priority: 32
    vlan: {}
description: br_test
ipv4:
  enabled: true
  address:
  - ip: 192.168.0.254
    prefix-length: 24
  dhcp: false
ipv6:
  enabled: true
  address:
  - ip: 2000::a
    prefix-length: 64
  autoconf: false
  dhcp: false
lldp:
  enabled: false
mac-address: AA:CF:A8:2D:6A:48
mtu: 1500

difference
==========
--- desired
+++ current
@@ -4,9 +4,21 @@
 state: up
 bridge:
   options:
+    group-addr: 01:80:C2:00:00:00
     group-forward-mask: 0
+    hash-max: 4096
     mac-ageing-time: 300
-    multicast-snooping: true
+    multicast-last-member-count: 2
+    multicast-last-member-interval: 100
+    multicast-querier: false
+    multicast-querier-interval: 25500
+    multicast-query-interval: 12500
+    multicast-query-response-interval: 1000
+    multicast-query-use-ifaddr: false
+    multicast-router: 1
+    multicast-snooping: false
+    multicast-startup-query-count: 2
+    multicast-startup-query-interval: 3125
     stp:
       enabled: false
       forward-delay: 15
@@ -36,6 +48,9 @@
   address:
   - ip: 2000::a
     prefix-length: 64
+  autoconf: false
   dhcp: false
+lldp:
+  enabled: false
 mac-address: AA:CF:A8:2D:6A:48
 mtu: 1500
Comment 1 Fernando F. Mancera 2020-07-21 14:47:25 UTC 
This is depending on https://bugzilla.redhat.com/show_bug.cgi?id=1859244. Nmstate will add a test case for this when fixed.
Comment 6 Mingyu Shi 2021-01-07 03:35:34 UTC 
Verified with versions:
nmstate-1.0.1-0.1.el8.noarch
nispor-1.0.1-2.el8.x86_64
NetworkManager-1.30.0-0.5.el8.x86_64
Comment 8 errata-xmlrpc 2021-05-18 15:16:54 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (nmstate bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1748
Note You need to log in before you can comment on or make changes to this bug.