← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1669021] [NEW] ovsfw doesn't support cidr in allowed_address_pairs

 

Public bug reported:

Seen on: ocata devstack

Steps to reproduce:

1. update port with allowed_address_pairs as cidr, for example

 neutron port-update 2559e0ff-6a52-4b78-9471-246fecb846c0 --allowed-
address-pairs type=dict list=true  ip_address=192.168.0.0/30

2. switch to openvswitch firewall
firewall_driver=openvswitch in /etc/neutron/plugins/ml2/ml2_conf.ini

3. observe a bunch of errors in openvswitch-agent log
(http://paste.openstack.org/show/600933/)

with ValueError: IPAddress() does not support netmasks or subnet
prefixes! See documentation for details.

** Affects: neutron
     Importance: Undecided
     Assignee: Inessa Vasilevskaya (ivasilevskaya)
         Status: In Progress

** Changed in: neutron
     Assignee: (unassigned) => Inessa Vasilevskaya (ivasilevskaya)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1669021

Title:
  ovsfw doesn't support cidr in allowed_address_pairs

Status in neutron:
  In Progress

Bug description:
  Seen on: ocata devstack

  Steps to reproduce:

  1. update port with allowed_address_pairs as cidr, for example

   neutron port-update 2559e0ff-6a52-4b78-9471-246fecb846c0 --allowed-
  address-pairs type=dict list=true  ip_address=192.168.0.0/30

  2. switch to openvswitch firewall
  firewall_driver=openvswitch in /etc/neutron/plugins/ml2/ml2_conf.ini

  3. observe a bunch of errors in openvswitch-agent log
  (http://paste.openstack.org/show/600933/)

  with ValueError: IPAddress() does not support netmasks or subnet
  prefixes! See documentation for details.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1669021/+subscriptions


Follow ups