yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: neutron
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1316515

Title:
  DHCPv6 Solicit should be allowed like IPv4

Status in OpenStack Neutron (virtual network service):
  Fix Released

Bug description:
  DHCPv6 solicit UDP package is currently dropped because there is no
  security group rule to allow it like IPv4:

  Chain neutron-openvswi-o3bb99c0d-6 (2 references)
  target     prot opt source               destination         
  RETURN     ipv6-icmp    anywhere             anywhere                 <- Notice here only ipv6-icmp is allowed
  neutron-openvswi-s3bb99c0d-6  all      anywhere             anywhere  

  Chain neutron-openvswi-s3bb99c0d-6 (1 references)
  target     prot opt source               destination         
  RETURN     all      2001:2009::5/128     anywhere            MAC FA:16:3E:86:60:09
  DROP       all      anywhere             anywhere   

  
  UDP solicit packet from dhcpv6 client port 546 to server 547 should be allowed so VM can get dhcpv6 reply.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1316515/+subscriptions