← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1316744] [NEW] VPNAAS :Sometimes VM across the vpn sites are not able to ping from one side

 

Public bug reported:

Steps to Reproduce: 
1. Create a site with vm and all other vpn operations.
neutron  vpn-ipsecsite-connection list
+--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
| id                                   | name           | peer_address  | peer_cidrs     | route_mode | auth_mode | status |
+--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
| d66dc9f8-6ffe-48da-a839-ee8dc9525cd1 | vpnconnection1 | $Peer_Address2 | "11.11.1.0/24" | static     | psk       | ACTIVE |
+--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
 neutron vpn-service-list
+--------------------------------------+--------+--------------------------------------+--------+
| id                                   | name   | router_id                            | status |
+--------------------------------------+--------+--------------------------------------+--------+
| 3d27724b-8de9-44df-9ebc-342c8c7d501f | myvpn1 | 041afb22-b78c-4d79-aeeb-8d493c03ddf7 | ACTIVE |
+--------------------------------------+--------+--------------------------------------+--------+

Site 2:
 Create a site with vm and all other vpn operations.
 neutron vpn-service-list
+--------------------------------------+--------+--------------------------------------+--------+
| id                                   | name   | router_id                            | status |
+--------------------------------------+--------+--------------------------------------+--------+
| 55371fdd-f9ab-418b-a55c-52f082de3700 | myvpn1 | a05743dc-678b-4334-bd00-927f978b079f | ACTIVE |
+--------------------------------------+--------+--------------------------------------+--------+
neutron  vpn-ipsecsite-connection list
+--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
| id                                   | name           | peer_address  | peer_cidrs     | route_mode | auth_mode | status |
+--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
| ce2cf55e-99a5-4cb4-9ff9-3c649dcf31ff | vpnconnection1 | $Peer_Address1 | "10.10.1.0/24" | static     | psk       | ACTIVE |
+--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
 
Try to ping the vm across the site .
Actual Results: 
VM1 on site1 is not able to ping to VM2 onto site 2
VM2 on site2 is able to ping VM1 onto site1

Expected Results: VM across the sites should able to ping

** Affects: neutron
     Importance: Undecided
         Status: New

** Attachment added: "vpnlog.zip"
   https://bugs.launchpad.net/bugs/1316744/+attachment/4106709/+files/vpnlog.zip

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1316744

Title:
  VPNAAS :Sometimes VM across the vpn sites are not able to ping from
  one side

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  Steps to Reproduce: 
  1. Create a site with vm and all other vpn operations.
  neutron  vpn-ipsecsite-connection list
  +--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
  | id                                   | name           | peer_address  | peer_cidrs     | route_mode | auth_mode | status |
  +--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
  | d66dc9f8-6ffe-48da-a839-ee8dc9525cd1 | vpnconnection1 | $Peer_Address2 | "11.11.1.0/24" | static     | psk       | ACTIVE |
  +--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
   neutron vpn-service-list
  +--------------------------------------+--------+--------------------------------------+--------+
  | id                                   | name   | router_id                            | status |
  +--------------------------------------+--------+--------------------------------------+--------+
  | 3d27724b-8de9-44df-9ebc-342c8c7d501f | myvpn1 | 041afb22-b78c-4d79-aeeb-8d493c03ddf7 | ACTIVE |
  +--------------------------------------+--------+--------------------------------------+--------+

  Site 2:
   Create a site with vm and all other vpn operations.
   neutron vpn-service-list
  +--------------------------------------+--------+--------------------------------------+--------+
  | id                                   | name   | router_id                            | status |
  +--------------------------------------+--------+--------------------------------------+--------+
  | 55371fdd-f9ab-418b-a55c-52f082de3700 | myvpn1 | a05743dc-678b-4334-bd00-927f978b079f | ACTIVE |
  +--------------------------------------+--------+--------------------------------------+--------+
  neutron  vpn-ipsecsite-connection list
  +--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
  | id                                   | name           | peer_address  | peer_cidrs     | route_mode | auth_mode | status |
  +--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
  | ce2cf55e-99a5-4cb4-9ff9-3c649dcf31ff | vpnconnection1 | $Peer_Address1 | "10.10.1.0/24" | static     | psk       | ACTIVE |
  +--------------------------------------+----------------+---------------+----------------+------------+-----------+--------+
   
  Try to ping the vm across the site .
  Actual Results: 
  VM1 on site1 is not able to ping to VM2 onto site 2
  VM2 on site2 is able to ping VM1 onto site1

  Expected Results: VM across the sites should able to ping

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1316744/+subscriptions


Follow ups

References