[Mainline-3029]: Routes are not leaked when policy is attached to VNs

Bug #1657393 reported by alok kumar
26
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R3.2
Fix Committed
Critical
Sahil Sabharwal
Trunk
Fix Committed
Critical
Sahil Sabharwal

Bug Description

This is basic policy test where the policy is attached to 2 VNs and then ping to from 1 VN to other one.
This is failing and after debugging it's found that routes are not leaked into vrfs where policy is attached(verified it in control node too).

test steps:
1. Create 2 VNs, say 1.1.1.0/24 and 2.2.2.0/24
2. launch 1 VM in each.
3. create the policy to allow all traffic between these VNs and attach it to both VNs.
4. now ping from VN1 to VN2.

config details:
Display Name
pol1
UUID
552bf96f-1f7a-460c-a039-11e7873f8ec6
Connected networks
vn1
vn2
Rules
pass protocol any network vn1 ports any <> network vn2 ports any

VNs:
https://nodeg24.englab.juniper.net:8143/#p=config_networking_networks

control node routes for vn1:
http://nodeg24.englab.juniper.net:8083/Snh_ShowRouteReq?x=default-domain:admin:vn1:vn1.inet.0

setup details:
please use nodeg24 to debug, it's a single node setup.

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] master

Review in progress for https://review.opencontrail.org/28136
Submitter: <email address hidden> (<email address hidden>)

tags: added: blocker
Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/28136
Committed: http://github.org/Juniper/contrail-controller/commit/6e65613401048c2189e0b991ada5af727b36d494
Submitter: Zuul (<email address hidden>)
Branch: master

commit 6e65613401048c2189e0b991ada5af727b36d494
Author: Sahil <email address hidden>
Date: Mon Jan 23 16:42:55 2017 -0800

IFMAP client is overridding ST ConnectionType

vnc_ifmap_client in vnc_cfg_api_server is overridding schema transformer
ConnectionType object with sandesh ConnectionType object.

Change-Id: I94294d5515a7605f57b75779d26b7a325b9d8bcc
Closes-Bug: 1657393

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : [Review update] R3.2

Review in progress for https://review.opencontrail.org/28993
Submitter: Sachin Bansal (<email address hidden>)

Revision history for this message
OpenContrail Admin (ci-admin-f) wrote : A change has been merged

Reviewed: https://review.opencontrail.org/28993
Committed: http://github.org/Juniper/contrail-controller/commit/f8e07220c7215f61704a4d1a7360f27d5365f35b
Submitter: Zuul (<email address hidden>)
Branch: R3.2

commit f8e07220c7215f61704a4d1a7360f27d5365f35b
Author: Sahil <email address hidden>
Date: Mon Jan 23 16:42:55 2017 -0800

IFMAP client is overridding ST ConnectionType

vnc_ifmap_client in vnc_cfg_api_server is overridding schema transformer
ConnectionType object with sandesh ConnectionType object.

Change-Id: I94294d5515a7605f57b75779d26b7a325b9d8bcc
Closes-Bug: 1657393
(cherry picked from commit 6e65613401048c2189e0b991ada5af727b36d494)

Ankit Chadha (achadha)
information type: Proprietary → Public
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.