[NETVIRT-1048]  Permit ALL ICMP with remote-Security Group fails Created: 27/Dec/17  Updated: 12/May/18  Resolved: 12/May/18

Status: Resolved
Project: netvirt
Component/s: None
Affects Version/s: None
Fix Version/s: Oxygen-SR2

Type: Bug Priority: Medium
Reporter: Arthi Bhattacharjee Assignee: Unassigned
Resolution: Won't Do Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified


 Description   

Setup:
3 control nodes
2 compute nodes
3 ODL - cluster setup

Distro: nitrogen formal release

Steps to reproduce
1. Create two networks
2. Create a VM for each network
3. Create a router and network interfaces
4. Create 2 SG. (sg-connectivity and sg-connectivity2)

Add rules to sg-connectivity
openstack security group rule create sg-connectivity --ingress --dst-port 22:22 --protocol tcp
openstack security group rule create sg-connectivity --egress --dst-port 22:22 --protocol tcp
openstack security group rule create sg-connectivity --ingress --protocol 1 --remote-group sg-connectivity2
openstack security group rule create sg-connectivity --egress --protocol 1 --remote-group sg-connectivity2

Add rules to sg-connectivity2
openstack security group rule create sg-connectivity2 --ingress --dst-port 22:22 --protocol tcp
openstack security group rule create sg-connectivity2 --egress --dst-port 22:22 --protocol tcp
openstack security group rule create sg-connectivity2 --ingress --protocol 1 --remote-group sg-connectivity
openstack security group rule create sg-connectivity2 --egress --protocol 1 --remote-group sg-connectivity

5. CHeck communication within and across the networks.

Observation:
Communication fails across the network.



 Comments   
Comment by Sushant Jha [ 27/Apr/18 ]

Followed the steps mentioned to reproduce the issue and below and found that the communication is happening as expected between and across networks.

Could you please try once again with the latest master distribution?

Comment by Vinh Nguyen [ 12/May/18 ]

The issue is not observed in Oxygen and master. This is most likely a duplicate of NETVIRT-1123 which had been fixed and merged for oxygen and master. 

Generated at Wed Feb 07 20:23:06 UTC 2024 using Jira 8.20.10#820010-sha1:ace47f9899e9ee25d7157d59aa17ab06aee30d3d.