yahoo-eng-team team mailing list archive

[Spoorti <1756028@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

When i try to create secure site using ipsec-site-connection-create the
status always remains in PENDING_CREATE. This makes it impossible to
ping two VMs on either side of the secure site.

Steps to reproduce:
$ neutron ipsec-site-connection-create --vpnservice-id a7e325dd-9d34-4720-afa5-a38e1d552157 --ikepolicy-id cfb8a527-e646-439b-856f-73042b505c95  --ipsecpolicy-id a8513ab5-96ab-45c0-ad9c-434c29510053  --peer-id 10.0.0.0  --peer-address 10.0.0.0  --psk secret  --peer-cidr 10.0.0.0/24
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Created a new ipsec_site_connection:
+-------------------+----------------------------------------------------+
| Field             | Value                                              |
+-------------------+----------------------------------------------------+
| admin_state_up    | True                                               |
| auth_mode         | psk                                                |
| description       |                                                    |
| dpd               | {"action": "hold", "interval": 30, "timeout": 120} |
| id                | 5b92ab15-bc3e-47f2-9865-18de4adaac3f               |
| ikepolicy_id      | cfb8a527-e646-439b-856f-73042b505c95               |
| initiator         | bi-directional                                     |
| ipsecpolicy_id    | a8513ab5-96ab-45c0-ad9c-434c29510053               |
| local_ep_group_id |                                                    |
| local_id          |                                                    |
| mtu               | 1500                                               |
| name              |                                                    |
| peer_address      | 10.0.0.0                                           |
| peer_cidrs        | 10.0.0.0/24                                        |
| peer_ep_group_id  |                                                    |
| peer_id           | 10.0.0.0                                           |
| project_id        | ec82dc95ea564ec39852365ecfca3a09                   |
| psk               | secret                                             |
| route_mode        | static                                             |
| status            | PENDING_CREATE                                     |
| tenant_id         | ec82dc95ea564ec39852365ecfca3a09                   |
| vpnservice_id     | a7e325dd-9d34-4720-afa5-a38e1d552157               |
+-------------------+----------------------------------------------------+

** Affects: neutron
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1756028

Title:
  ipsec-site-connection-create always remains in PENDING_CREATE

Status in neutron:
  New

Bug description:
  When i try to create secure site using ipsec-site-connection-create
  the status always remains in PENDING_CREATE. This makes it impossible
  to ping two VMs on either side of the secure site.

  Steps to reproduce:
  $ neutron ipsec-site-connection-create --vpnservice-id a7e325dd-9d34-4720-afa5-a38e1d552157 --ikepolicy-id cfb8a527-e646-439b-856f-73042b505c95  --ipsecpolicy-id a8513ab5-96ab-45c0-ad9c-434c29510053  --peer-id 10.0.0.0  --peer-address 10.0.0.0  --psk secret  --peer-cidr 10.0.0.0/24
  neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
  Created a new ipsec_site_connection:
  +-------------------+----------------------------------------------------+
  | Field             | Value                                              |
  +-------------------+----------------------------------------------------+
  | admin_state_up    | True                                               |
  | auth_mode         | psk                                                |
  | description       |                                                    |
  | dpd               | {"action": "hold", "interval": 30, "timeout": 120} |
  | id                | 5b92ab15-bc3e-47f2-9865-18de4adaac3f               |
  | ikepolicy_id      | cfb8a527-e646-439b-856f-73042b505c95               |
  | initiator         | bi-directional                                     |
  | ipsecpolicy_id    | a8513ab5-96ab-45c0-ad9c-434c29510053               |
  | local_ep_group_id |                                                    |
  | local_id          |                                                    |
  | mtu               | 1500                                               |
  | name              |                                                    |
  | peer_address      | 10.0.0.0                                           |
  | peer_cidrs        | 10.0.0.0/24                                        |
  | peer_ep_group_id  |                                                    |
  | peer_id           | 10.0.0.0                                           |
  | project_id        | ec82dc95ea564ec39852365ecfca3a09                   |
  | psk               | secret                                             |
  | route_mode        | static                                             |
  | status            | PENDING_CREATE                                     |
  | tenant_id         | ec82dc95ea564ec39852365ecfca3a09                   |
  | vpnservice_id     | a7e325dd-9d34-4720-afa5-a38e1d552157               |
  +-------------------+----------------------------------------------------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1756028/+subscriptions