Re: [ovirt-users] Promiscuous Mode

I haven't tried it, but here is a guide on how to add a hook to ovirt-node: http://www.ovirt.org/develop/developer-guide/vdsm/hook/qemucmdline/ On 03/05/2016 09:48 PM, Christopher Young wrote: > > Question: > > There is no yum functionality on ovirt-node/RHEV-H, so how does one go > about this in that scenario? > > On Sat, Mar 5, 2016 at 3:32 PM, combuster <combuster(a)gmail.com&gt; wrote: >> >> It's great to know that it's working. >> >> Best of luck Clint. >> >> >> On 03/05/2016 09:09 PM, clint(a)theboggios.com wrote: >>> >>> On 2016-03-05 13:34, combuster wrote: >>>> >>>> Correct procedure would be: >>>> >>>> 1. On each of your ovirt nodes run: >>>> >>>> yum install vdsm-hook-macspoof >>>> >>>> 2. On the engine run: >>>> >>>> sudo engine-config -s "UserDefinedVMProperties=macspoof=^(true|false)$" >>>> >>>> 3. Edit OpenVPN virtual machine settings and add a custom property >>>> containing macspoof keyword and set the value "true" for it. >>>> >>>> If you want to remove filtering for a single interface, then replace >>>> steps 2 and 3 as outlined in the README. >>>> >>>> Kind regards, >>>> >>>> Ivan >>>> >>>> On 03/05/2016 08:21 PM, clint(a)theboggios.com wrote: >>>>> >>>>> On 2016-03-05 13:13, combuster wrote: >>>>>> >>>>>> Ignore the link (minor accident while pasting). Yum will download the >>>>>> appropriate one from the repos. >>>>>> >>>>>> On 03/05/2016 08:09 PM, combuster wrote: >>>>>> >>>>>>> Just the hook rpm (vdsm-hook-macspoof [1]). >>>>>>> >>>>>>> Ivan >>>>>>> >>>>>>> On 03/05/2016 08:02 PM, Christopher Young wrote: >>>>>>> >>>>>>> I had a related question on this. >>>>>>> >>>>>>> When it comes to ovirt-node or rhev-h, is there anything required to >>>>>>> be installed on the hypervisor hosts themselves? >>>>>>> >>>>>>> Thanks, >>>>>>> >>>>>>> Chris >>>>>>> On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com&gt; wrote: >>>>>>> Hi Clint, you might want to check the macspoof hook features here: >>>>>>> >>>>>>> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof [2] >>>>>>> >>>>>>> This should override arp/spoofing filtering, that might be the >>>>>>> cause of your issues with OpenVPN setup (first guess). >>>>>>> >>>>>>> On 03/05/2016 07:30 PM, Clint Boggio wrote: >>>>>>> I am deploying an OpenVPN server in my OVirt environment and I've >>>>>>> come to a dead stop with the developer support on a topic related to >>>>>>> OVirt configuration. >>>>>>> >>>>>>> The developer wants me to put the VM's underlying NIC into >>>>>>> promiscuous mode. >>>>>>> >>>>>>> I've seen this in a VMware environment and I know what they are >>>>>>> asking me to do, and I'm wondering if there is a clear way to do >>>>>>> this in my OVirt environment. >>>>>>> >>>>>>> I found "port mirroring" but no "promiscuous mode" >>>>>>> >>>>>>> Cheers and thank you ! >>>>>>> _______________________________________________ >>>>>>> Users mailing list >>>>>>> Users(a)ovirt.org >>>>>>> http://lists.ovirt.org/mailman/listinfo/users [3] >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Users mailing list >>>>>>> Users(a)ovirt.org >>>>>>> http://lists.ovirt.org/mailman/listinfo/users [3] >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> Links: >>>>>> ------ >>>>>> [1] >>>>>> >>>>>> >>>>>> http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m... >>>>>> [2] https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof >>>>>> [3] http://lists.ovirt.org/mailman/listinfo/users >>>>> >>>>> >>>>> >>>>> Thank you very much. Reading the README it appears that there is a >>>>> series of commands to run on the engine to make the options to remove >>>>> filtering from the vNIC, or the whole VM available. What purpose is >>>>> filled >>>>> by the two scripts that are included in the git, and where do I put >>>>> them so >>>>> that they will be utilized if that's even necessary ? >>> >>> >>> >>> Ivan, because of YOU, I get me weekend back ! It works and OVPN is up >>> and >>> running. >>> >>> Thank you SO MUCH ! >> >> >> _______________________________________________ >> Users mailing list >> Users(a)ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users