yahoo-eng-team team mailing list archive

[Ritesh Anand <ritesh.anand@xxxxxx>]

With legacy router (CVR) ping6 works without the following security group rules:
neutron security-group-rule-create --protocol icmp --ethertype IPv6 --direction egress 4cf607a6-537f-4893-8531-70ba23895b3d
neutron security-group-rule-create --protocol icmp --ethertype IPv6 --direction ingress 4cf607a6-537f-4893-8531-70ba23895b3d

The rules are needed in DVR for ping6 to work.


** Changed in: neutron
       Status: Invalid => New

** Tags added: sg-fw

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1513279

Title:
  routing with dhcpv6-stateful addressing is broken with DVR

Status in neutron:
  New

Bug description:
  Not able to ping v6 address of vm on a different network.  With legacy router.
  Setup has one controller/network node and two compute nodes.

  Steps:
  0. Add security rules to allow ping traffic. 
      neutron security-group-rule-create --protocol icmp --direction ingress 94d41516-dab5-413c-9349-7c9bc3a09e75
  1. create two networks.
  2. create ipv4 subnet on each (for accessing vm).
  3. create ipv6 subnet on each with dhcpv6-stateful addressing.
       neutron subnet-create dnet1 1111:1::1/64 --name d6sub1 --enable-dhcp --ip-version 6 --ipv6-ra-mode dhcpv6-stateful --ipv6-    address-mode dhcpv6-stateful
  4. create a router (not distributed).
  5. add interface to router on each of the four subnets.
  6. boot a vm on both networks.
  7. Log into the guest vm and configure inteface to receive inet6 dhcp address; use dhclient to get v6 address.
  8. Ping v6 address of the other guest vm. Fails!

  
  ubuntu@dvm11:~$ ping6 2222:2::4
  PING 2222:2::4(2222:2::4) 56 data bytes
  From 1111:1::1 icmp_seq=1 Destination unreachable: Address unreachable
  From 1111:1::1 icmp_seq=2 Destination unreachable: Address unreachable
  From 1111:1::1 icmp_seq=3 Destination unreachable: Address unreachable

  
  Note: As we need to modify interface settings and use dhclient, ubuntu cloud image was used. One may need to set MTU to 1400 for communicating with ubuntu cloud image.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1513279/+subscriptions