ipsec-site-connection-create always remains in PENDING_CREATE

Bug #1756028 reported by Spoorti
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Expired
Undecided
Unassigned

Bug Description

When i try to create secure site using ipsec-site-connection-create the status always remains in PENDING_CREATE. This makes it impossible to ping two VMs on either side of the secure site.

Steps to reproduce:
$ neutron ipsec-site-connection-create --vpnservice-id a7e325dd-9d34-4720-afa5-a38e1d552157 --ikepolicy-id cfb8a527-e646-439b-856f-73042b505c95 --ipsecpolicy-id a8513ab5-96ab-45c0-ad9c-434c29510053 --peer-id 10.0.0.0 --peer-address 10.0.0.0 --psk secret --peer-cidr 10.0.0.0/24
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Created a new ipsec_site_connection:
+-------------------+----------------------------------------------------+
| Field | Value |
+-------------------+----------------------------------------------------+
| admin_state_up | True |
| auth_mode | psk |
| description | |
| dpd | {"action": "hold", "interval": 30, "timeout": 120} |
| id | 5b92ab15-bc3e-47f2-9865-18de4adaac3f |
| ikepolicy_id | cfb8a527-e646-439b-856f-73042b505c95 |
| initiator | bi-directional |
| ipsecpolicy_id | a8513ab5-96ab-45c0-ad9c-434c29510053 |
| local_ep_group_id | |
| local_id | |
| mtu | 1500 |
| name | |
| peer_address | 10.0.0.0 |
| peer_cidrs | 10.0.0.0/24 |
| peer_ep_group_id | |
| peer_id | 10.0.0.0 |
| project_id | ec82dc95ea564ec39852365ecfca3a09 |
| psk | secret |
| route_mode | static |
| status | PENDING_CREATE |
| tenant_id | ec82dc95ea564ec39852365ecfca3a09 |
| vpnservice_id | a7e325dd-9d34-4720-afa5-a38e1d552157 |
+-------------------+----------------------------------------------------+

Revision history for this message
zhaobo (zhaobo6) wrote :

AFAIK, the status will be updated by the backend, it's better to check the backend is alive/running right. Also please make sure which version of your env. Thank you.

Changed in neutron:
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for neutron because there has been no activity for 60 days.]

Changed in neutron:
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.