VM's allowed address pair IP is not updated in the remote group VMs allowed IP list.

Bug #1338480 reported by Alok Kumar Maurya
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Expired
Medium
Unassigned

Bug Description

1. Create a new tenant
2. Create a network -> Add subnet (10.10.10.0/24) in the network
3. Create two VMs (VM1 and VM2) in network in s default security group.
4. Now updated VM1 port with an allowed address pair IP (20.20.20.2)

 neutron port-update 079804ae-d941-4ec2-b36a-8b1d60b0cda8 --allowed-address-pairs type=dict list=true ip_address=20.20.20.2

Update VM port2 IP with and allowed address pair IP 20.20.20.3

neutron port-update f538604a-3437-447b-a4ea-7d37b07a88c6 --allowed-address-pairs type=dict list=true ip_address=20.20.20.3

5. In VM1 , add one more IP address 20.20.20.2

sudo ip addr add 20.20.20.2/24 dev eth0

In VM2 , add IP address 20.20.20.2

sudo ip addr add 20.20.20.3/24 dev eth0

now from VM1 , try to ping 20.20.20.3

It fails to ping

Then try to restart neutron-plugin-openvswitch-agent on compute ndoe ,

 then try to ping 20.20.20.3 from VM1 , it starts pinging.

Tags: sg-fw
description: updated
summary: - Updated IP of allowed address pair is not reflected in the remote
- security groups (allowed IP list)
+ VM's allowed address pair IP is not updated in the remote group VMs
+ allowed IP list.
Changed in neutron:
assignee: nobody → Puneet Arora (puneet-arora)
tags: added: sg-fw
Changed in neutron:
importance: Undecided → Medium
Changed in neutron:
assignee: Puneet Arora (puneet-arora) → nobody
Revision history for this message
Ann Taraday (akamyshnikova) wrote :

Recreate all steps mentioned in bug description and error did not raise. Please, provide some more information if it is still reproduced.

Changed in neutron:
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for neutron because there has been no activity for 60 days.]

Changed in neutron:
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.