https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/NETVIRT-302 netvirt <p>Currently IPv6 (and also applicable to some IPv4 ACL rules) ACL rules allow ingress DHCPv6/RA traffic as necessary. However, it does not restrict the rule to allow traffic "only" from the Neutron router interface or DHCP agent port. This bug is to bring in parity between OpenStack and ODL implementation.</p> <p>Operating System: All<br/> Platform: All</p> NETVIRT-302

Make IPv6 ACL rules more restrictive in nature

Bug Low Resolved Won't Do Kiran Vasudeva Sridhar Gaddam Mon, 28 Nov 2016 11:55:29 +0000 Thu, 3 May 2018 14:37:01 +0000 Thu, 19 Apr 2018 08:56:39 +0000 Carbon General 0 5 <p>Aswin, Sridhar, is this bug still valid?</p> <p>This is still valid, the rules does not check whether the traffic is originating from neutron DHCP server</p> <p>Aswin, is this still valid?</p> <p>Sam<br/> Yes this is yet to be addressed</p> <p><a href="https://jira.opendaylight.org/secure/ViewProfile.jspa?name=rshashidhar" class="user-hover" rel="rshashidhar">rshashidhar</a> Is there a plan to fix this. I remember correctly this postponed when there was an attempt to achieve neutron parity on fixed rules.</p> <p>We do not have any immediate plan to fix this issue.</p> <p> </p> <p>Aswin, Sridhar,</p> <p>As we discussed over E-mail, since the Openstack has removed the restrictions for Neutron router interface/Dhcp Agent as per <a href="https://review.openstack.org/#/c/456745/1" class="external-link" target="_blank" rel="nofollow noopener">https://review.openstack.org/#/c/456745/1</a>, request you to confirm if we can close this defect OR needs any fix.</p> <p> </p> <p>When tested with latest Openstack version, the DHCP allow rule ingress is in parity with Openstack.</p> <p>Kiran thanks for checking it.</p> Development External issue ID 7252 External issue URL Rank 0|i01qyn: