yahoo-eng-team team mailing list archive

[Paul Michali <1291619@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Currently, this driver supports update of the VPN service, which one can
change the admin state to up or down.

In addition, even though IPSec site-to-site connection update is not
currently supported (one can do a delete/create), the user could create
the connection with admin state down.

When the service admin state is changed to down, the change does not
happen in the device driver, and the status is not reported correctly.
This is due to an issue with the plugin (bug 1291609 created). If later,
another change occurs that causes a sync of the config, the connections
on the VPN service will be deleted (the CSR REST API doesn't yet have
support for admin down), but the status still will not be updated
correctly. The configuration in OpenStack can get out of sync with the
configuration on the CSR.

If the IPSec site-to-site connection is created in admin down state, the
underlying tunnel is not created (correct), but the status still shows
PENDING_CREATE.

** Affects: neutron
     Importance: Undecided
     Assignee: Paul Michali (pcm)
         Status: In Progress

** Changed in: neutron
     Assignee: (unassigned) => Paul Michali (pcm)

** Changed in: neutron
       Status: New => In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1291619

Title:
  Cisco VPN device drivers admin state not reported correctly

Status in OpenStack Neutron (virtual network service):
  In Progress

Bug description:
  Currently, this driver supports update of the VPN service, which one
  can change the admin state to up or down.

  In addition, even though IPSec site-to-site connection update is not
  currently supported (one can do a delete/create), the user could
  create the connection with admin state down.

  When the service admin state is changed to down, the change does not
  happen in the device driver, and the status is not reported correctly.
  This is due to an issue with the plugin (bug 1291609 created). If
  later, another change occurs that causes a sync of the config, the
  connections on the VPN service will be deleted (the CSR REST API
  doesn't yet have support for admin down), but the status still will
  not be updated correctly. The configuration in OpenStack can get out
  of sync with the configuration on the CSR.

  If the IPSec site-to-site connection is created in admin down state,
  the underlying tunnel is not created (correct), but the status still
  shows PENDING_CREATE.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1291619/+subscriptions