[NETVIRT-734] ICMP type-code is not set using CLI command Created: 16/Jun/17  Updated: 19/Oct/17  Resolved: 18/Oct/17

Status: Resolved
Project: netvirt
Component/s: General
Affects Version/s: Carbon
Fix Version/s: None

Type: Bug
Reporter: Arthi Bhattacharjee Assignee: Unassigned
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Operating System: All
Platform: All

Attachments: PNG File type-code.PNG    
External issue ID: 8703

 Description   

Steps:
1. Create Security groups,
openstack security group create sg1

Delete default rules from sg1
openstack security group rule delete <rule_id_ingress>
openstack security group rule delete <rule_id_egress>

2. Associate rules to SG,

openstack security group rule create --ingress --protocol icmp --icmp-type 8 --icmp-code 0 sg1
openstack security group rule create --egress --protocol icmp --icmp-type 8 --icmp-code 0 sg1

3. Create Network
openstack network create l2_network_1 --provider-network-type vxlan

openstack subnet create --network l2_network_1 --subnet-range 30.0.0.0/24 l2_subnet_1

4. Create VM
openstack server create --image <imageID> --flavor m1.tiny --nic net-id=<networkID> VM1 --security-group sg1

openstack server create --image <imageID> --flavor m1.tiny --nic net-id=<networkID> VM2 --security-group sg1

Execute Ping communication between VMs

Observation: Rule is created as 8-None under Port range column.
Expected: Has to by 8-0

Note: Works correct using horizon.

 Comments   
Comment by Arthi Bhattacharjee [ 16/Jun/17 ]

Attachment type-code.PNG has been added with description: type-code

Comment by Vinh Nguyen [ 11/Jul/17 ]

This is an openstack issue, not netvirt.
I just created a bug report in python-openstackclient:

https://bugs.launchpad.net/python-openstackclient/+bug/1703704

Arthi, does this issue has any impact to ODL SG processing? What is the type_code value when it comes to ODL programIcmpFlow?

Comment by Arthi Bhattacharjee [ 13/Jul/17 ]

Yes. It affects SG processing. When ICMP type-code 8 and 0 are given through CLI, flows are not added to the dump-flows.
And also, below is the neuron config datastore. Where, <port-range-max>...</port-range-max> is missing.

<security-rule>
<uuid>351e6008-0c01-4ca0-898d-681565fe3769</uuid>
<remote-ip-prefix>0.0.0.0/0</remote-ip-prefix>
<ethertype xmlns:x="urn:opendaylight:neutron-constants">x:ethertype-v4</ethertype>
<protocol>
(urn:opendaylight:neutron-constants?revision=2015-07-12)protocol-icmp
</protocol>
<port-range-min>8</port-range-min>
<direction xmlns:x="urn:opendaylight:neutron-constants">x:direction-egress</direction>
<security-group-id>3cd82d43-b671-4f08-ab03-5ed7c2b8e34a</security-group-id>
<tenant-id>7c69c1eb-afde-4dca-8714-6bff070cb29f</tenant-id>
</security-rule>
While checking horizon, it says, 8-None. Whereas, it has to be 8-0.

Comment by Venkatrangan Govindarajan [ 18/Oct/17 ]

Patch Fixed in Openstack Client
https://review.openstack.org/#/c/505890/.

You can get the latest version of python-openstackclient and try out the same.

Generated at Wed Feb 07 20:22:20 UTC 2024 using Jira 8.20.10#820010-sha1:ace47f9899e9ee25d7157d59aa17ab06aee30d3d.