| 2015-06-26 20:03:23 |
amit surana |
bug |
|
|
added bug |
| 2015-06-26 20:03:34 |
amit surana |
nominated for series |
|
juniperopenstack/r2.20 |
|
| 2015-06-26 20:03:34 |
amit surana |
bug task added |
|
juniperopenstack/r2.20 |
|
| 2015-06-26 20:03:41 |
amit surana |
juniperopenstack/r2.20: milestone |
|
r2.20-fcs |
|
| 2015-06-26 20:03:46 |
amit surana |
juniperopenstack/r2.20: importance |
Undecided |
Medium |
|
| 2015-06-26 20:03:54 |
amit surana |
nominated for series |
|
juniperopenstack/trunk |
|
| 2015-06-26 20:03:54 |
amit surana |
bug task added |
|
juniperopenstack/trunk |
|
| 2015-06-26 20:04:00 |
amit surana |
juniperopenstack/trunk: milestone |
|
r2.30-fcs |
|
| 2015-06-26 20:04:04 |
amit surana |
juniperopenstack/trunk: importance |
Undecided |
Medium |
|
| 2015-06-26 20:04:35 |
amit surana |
description |
MX does the NAT for BMS FIP. If BMSs belong to overlapping subnets, their respective NAT configurations will collide in the NAT pool section of the config and get rejected. Not sure if this will work if the overlapping subnets are mapped to different si-* interfaces (belonging to different FPCs). Even if the latter works, we do not have a way to make this work in 2.20.
Below config snippet shows the problem.
edit]
root@cmbu-tasman# show groups __contrail__ services | display set
set groups __contrail__ services service-set sv-_contrail_l3_6206_vn nat-rules sv-_contrail_l3_6206_vn-sn-rule
set groups __contrail__ services service-set sv-_contrail_l3_6206_vn nat-rules sv-_contrail_l3_6206_vn-dn-rule
set groups __contrail__ services service-set sv-_contrail_l3_6206_vn next-hop-service inside-service-interface si-2/0/0.12411
set groups __contrail__ services service-set sv-_contrail_l3_6206_vn next-hop-service outside-service-interface si-2/0/0.12412
set groups __contrail__ services service-set sv-_contrail_l3_6207_vn nat-rules sv-_contrail_l3_6207_vn-sn-rule
set groups __contrail__ services service-set sv-_contrail_l3_6207_vn nat-rules sv-_contrail_l3_6207_vn-dn-rule
set groups __contrail__ services service-set sv-_contrail_l3_6207_vn next-hop-service inside-service-interface si-2/0/0.100
set groups __contrail__ services service-set sv-_contrail_l3_6207_vn next-hop-service outside-service-interface si-2/0/0.101
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-sn-rule match-direction input
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-sn-rule term term_2_1_1_3 from source-address 2.1.1.3/32
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-sn-rule term term_2_1_1_3 then translated source-prefix 7.1.1.4/32
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-sn-rule term term_2_1_1_3 then translated translation-type basic-nat44
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-dn-rule match-direction output
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-dn-rule term term_7_1_1_4 from destination-address 7.1.1.4/32
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-dn-rule term term_7_1_1_4 then translated destination-prefix 2.1.1.3/32
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-dn-rule term term_7_1_1_4 then translated translation-type dnat-44
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-sn-rule match-direction input
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-sn-rule term term_2_1_1_3 from source-address 2.1.1.3/32
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-sn-rule term term_2_1_1_3 then translated source-prefix 8.1.1.4/32
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-sn-rule term term_2_1_1_3 then translated translation-type basic-nat44
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule match-direction output
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule term term_8_1_1_4 from destination-address 8.1.1.4/32
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule term term_8_1_1_4 then translated destination-prefix 2.1.1.3/32
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule term term_8_1_1_4 then translated translation-type dnat-44
[edit]
root@cmbu-tasman# commit
[edit groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule]
'term term_8_1_1_4'
With translation-type dnat-44, same pool cannot be shared by multiple rules or terms
error: configuration check-out failed |
MX does the NAT for BMS FIP. If BMSs belong to overlapping subnets, their respective NAT configurations will collide in the NAT pool section of the config and get rejected. Not sure if this will work if the overlapping subnets are mapped to different si-* interfaces (belonging to different FPCs). Even if the latter works, we do not have a way to make this work in 2.20.
This limitation does not apply to contrail VMs.
Below config snippet shows the problem.
edit]
root@cmbu-tasman# show groups __contrail__ services | display set
set groups __contrail__ services service-set sv-_contrail_l3_6206_vn nat-rules sv-_contrail_l3_6206_vn-sn-rule
set groups __contrail__ services service-set sv-_contrail_l3_6206_vn nat-rules sv-_contrail_l3_6206_vn-dn-rule
set groups __contrail__ services service-set sv-_contrail_l3_6206_vn next-hop-service inside-service-interface si-2/0/0.12411
set groups __contrail__ services service-set sv-_contrail_l3_6206_vn next-hop-service outside-service-interface si-2/0/0.12412
set groups __contrail__ services service-set sv-_contrail_l3_6207_vn nat-rules sv-_contrail_l3_6207_vn-sn-rule
set groups __contrail__ services service-set sv-_contrail_l3_6207_vn nat-rules sv-_contrail_l3_6207_vn-dn-rule
set groups __contrail__ services service-set sv-_contrail_l3_6207_vn next-hop-service inside-service-interface si-2/0/0.100
set groups __contrail__ services service-set sv-_contrail_l3_6207_vn next-hop-service outside-service-interface si-2/0/0.101
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-sn-rule match-direction input
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-sn-rule term term_2_1_1_3 from source-address 2.1.1.3/32
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-sn-rule term term_2_1_1_3 then translated source-prefix 7.1.1.4/32
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-sn-rule term term_2_1_1_3 then translated translation-type basic-nat44
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-dn-rule match-direction output
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-dn-rule term term_7_1_1_4 from destination-address 7.1.1.4/32
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-dn-rule term term_7_1_1_4 then translated destination-prefix 2.1.1.3/32
set groups __contrail__ services nat rule sv-_contrail_l3_6206_vn-dn-rule term term_7_1_1_4 then translated translation-type dnat-44
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-sn-rule match-direction input
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-sn-rule term term_2_1_1_3 from source-address 2.1.1.3/32
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-sn-rule term term_2_1_1_3 then translated source-prefix 8.1.1.4/32
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-sn-rule term term_2_1_1_3 then translated translation-type basic-nat44
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule match-direction output
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule term term_8_1_1_4 from destination-address 8.1.1.4/32
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule term term_8_1_1_4 then translated destination-prefix 2.1.1.3/32
set groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule term term_8_1_1_4 then translated translation-type dnat-44
[edit]
root@cmbu-tasman# commit
[edit groups __contrail__ services nat rule sv-_contrail_l3_6207_vn-dn-rule]
'term term_8_1_1_4'
With translation-type dnat-44, same pool cannot be shared by multiple rules or terms
error: configuration check-out failed |
|
| 2015-09-10 09:37:57 |
Vedamurthy Joshi |
tags |
|
bms releasenote |
|
| 2015-09-10 11:28:04 |
chhandak |
information type |
Proprietary |
Public |
|
| 2015-12-11 19:06:57 |
OpenContrail Admin |
juniperopenstack/r2.20: assignee |
|
Suresh Balineni (sbalineni) |
|
| 2015-12-11 19:07:03 |
OpenContrail Admin |
juniperopenstack/trunk: assignee |
|
Suresh Balineni (sbalineni) |
|
| 2015-12-11 19:07:08 |
OpenContrail Admin |
juniperopenstack/r2.20: status |
New |
Won't Fix |
|
| 2016-04-19 06:39:17 |
OpenContrail Admin |
juniperopenstack/trunk: milestone |
r3.0-fcs |
r3.1.0.0-fcs |
|
| 2016-04-19 08:42:36 |
OpenContrail Admin |
nominated for series |
|
juniperopenstack/r3.0 |
|
| 2016-04-19 08:42:36 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/r3.0 |
|
| 2016-04-19 08:42:36 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/r3.0 |
|
| 2016-06-03 10:01:05 |
Nagabhushana R |
juniperopenstack/r2.20: milestone |
r2.20-fcs |
|
|
| 2016-07-25 09:27:24 |
OpenContrail Admin |
juniperopenstack/trunk: milestone |
r3.1.0.0-fcs |
|
|
| 2016-07-25 09:27:24 |
OpenContrail Admin |
nominated for series |
|
juniperopenstack/r3.1 |
|
| 2016-07-25 09:27:24 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/r3.1 |
|
| 2016-07-25 09:27:24 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/r3.1 |
|
| 2016-07-26 05:57:14 |
Vinay Mahuli |
juniperopenstack/r3.1: importance |
Undecided |
Medium |
|
| 2016-07-26 05:57:14 |
Vinay Mahuli |
juniperopenstack/r3.1: assignee |
|
Suresh Balineni (sbalineni) |
|
| 2016-08-03 10:54:09 |
Nagabhushana R |
bug task deleted |
juniperopenstack/r3.0 |
|
|
| 2016-08-03 10:54:12 |
Nagabhushana R |
bug task deleted |
juniperopenstack/r3.1 |
|
|
| 2016-08-10 22:45:35 |
OpenContrail Admin |
juniperopenstack/trunk: status |
New |
In Progress |
|
| 2016-08-12 08:24:42 |
OpenContrail Admin |
juniperopenstack/trunk: status |
In Progress |
Fix Committed |
|
| 2016-08-12 08:24:44 |
OpenContrail Admin |
juniperopenstack/trunk: milestone |
|
r3.2.0.0-fcs |
|
| 2016-08-16 16:57:26 |
OpenContrail Admin |
nominated for series |
|
juniperopenstack/r3.1 |
|
| 2016-08-16 16:57:26 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/r3.1 |
|
| 2016-08-16 16:57:26 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/r3.1 |
|
| 2016-08-23 17:54:11 |
OpenContrail Admin |
juniperopenstack/r3.1: status |
In Progress |
Fix Committed |
|
| 2016-08-23 17:54:12 |
OpenContrail Admin |
juniperopenstack/r3.1: milestone |
|
r3.1.1.0 |
|
