yahoo-eng-team team mailing list archive

["hgangwx@xxxxxxxxxx" <hgangwx@xxxxxxxxxx>]

Public bug reported:

[Summary]
can create a security group rule with icmp option while ipv6 ether type is set

[Topo]
devstack all-in-one

[Description and expect result]
should return an error if create a security group rule with icmp option
 while ipv6 ether type is set

[Reproduceable or not]
reproduceable 

[Recreate Steps]
1) create a security group rule as below:
root@45-59:/opt/stack/devstack# neutron security-group-rule-create 
--protocol icmp --ethertype ipv6 sg1
Created a new security_group_rule:
+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| direction         | ingress                              |
| ethertype         | IPv6                                 |
| id                | 303c6aa8-0937-4ed9-89d5-2733febe72a0 |
| port_range_max    |                                      |
| port_range_min    |                                      |
| protocol          | icmp                                 |
| remote_group_id   |                                      |
| remote_ip_prefix  |                                      |
| security_group_id | 4fd891e1-4de0-42aa-8fcd-3fd34a978d0e |
| tenant_id         | fb3af4173e8e42bca61dca2175ec3774     |
+-------------------+--------------------------------------+

2)for reference, when create a security group rule with icmpv6 option 
while ipv4 ether type is set, an error message returned:
root@45-59:/opt/stack/devstack# neutron security-group-rule-create 
--protocol icmpv6 --ethertype ipv4 sg1
Invalid ethertype IPv4 for protocol icmpv6.
root@45-59:/opt/stack/devstack# 


[Configration]
reproduceable bug, no need

[logs]
reproduceable bug, no need

[Root cause anlyze or debug inf]
reproduceable bug

[Attachment]
None

** Affects: neutron
     Importance: Undecided
         Status: Invalid

** Changed in: neutron
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1528467

Title:
  can create a security group rule with icmp option while ipv6 ether
  type is set

Status in neutron:
  Invalid

Bug description:
  [Summary]
  can create a security group rule with icmp option while ipv6 ether type is set

  [Topo]
  devstack all-in-one

  [Description and expect result]
  should return an error if create a security group rule with icmp option
   while ipv6 ether type is set

  [Reproduceable or not]
  reproduceable 

  [Recreate Steps]
  1) create a security group rule as below:
  root@45-59:/opt/stack/devstack# neutron security-group-rule-create 
  --protocol icmp --ethertype ipv6 sg1
  Created a new security_group_rule:
  +-------------------+--------------------------------------+
  | Field             | Value                                |
  +-------------------+--------------------------------------+
  | direction         | ingress                              |
  | ethertype         | IPv6                                 |
  | id                | 303c6aa8-0937-4ed9-89d5-2733febe72a0 |
  | port_range_max    |                                      |
  | port_range_min    |                                      |
  | protocol          | icmp                                 |
  | remote_group_id   |                                      |
  | remote_ip_prefix  |                                      |
  | security_group_id | 4fd891e1-4de0-42aa-8fcd-3fd34a978d0e |
  | tenant_id         | fb3af4173e8e42bca61dca2175ec3774     |
  +-------------------+--------------------------------------+

  2)for reference, when create a security group rule with icmpv6 option 
  while ipv4 ether type is set, an error message returned:
  root@45-59:/opt/stack/devstack# neutron security-group-rule-create 
  --protocol icmpv6 --ethertype ipv4 sg1
  Invalid ethertype IPv4 for protocol icmpv6.
  root@45-59:/opt/stack/devstack# 


  [Configration]
  reproduceable bug, no need

  [logs]
  reproduceable bug, no need

  [Root cause anlyze or debug inf]
  reproduceable bug

  [Attachment]
  None

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1528467/+subscriptions