openstack team mailing list archive

["Steven Carter (stevenca)" <stevenca@xxxxxxxxx>]

I do not want quantum to allocate addresses for a particular network.  From what I read,  I should just do the "quantum net-create" without the "quantum subnet-create", but when I do I get the following error in compute.log:

2013-07-02 01:17:11.895 ERROR nova.compute.manager [req-5b09d7cf-ac78-49ab-ae9b-e8370f0150fe 6d1686b25183445ea56d950a0bcfd952 efbfe712fd4b41fa940c1ea4ff0a822e] [instance: 867d2910-b9a7-4605-bb57-66dce0c4ad78] Error: ['Traceback (most recent call last):\n', '  File "/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 831, in _run_instance\n    requested_networks, macs, security_groups)\n', '  File "/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 1075, in _allocate_network\n    instance=instance)\n', '  File "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__\n    self.gen.next()\n', '  File "/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 1071, in _allocate_network\n    security_groups=security_groups)\n', '  File "/usr/lib/python2.6/site-packages/nova/network/api.py", line 46, in wrapper\n    res = f(self, context, *args, **kwargs)\n', '  File "/usr/lib/python2.6/site-packages/nova/network/quantumv2/api.py", line 233, in allocate_for_instance\n    raise exception.SecurityGroupCannotBeApplied()\n', 'SecurityGroupCannotBeApplied: Network requires port_security_enabled and subnet associated in order to apply security groups.\n']

I do not get the error when I do the "quantum subnet-create" with the "quantum subnet-create" and just ignore the allocation.  It seems like either I am doing something wrong or there is a better way.

Thanks,

Steven.