1:19 p.m.
Hi,
Another question: I need to connect 2 eths to a Fortigate cluster so I
need them to be in a bridge with single ip so it can connect to the DMZ.
As far as I can see, ovirt 3.2 is allowing me to create bonds and assign
logical network to them, but not to create a bridge. Can I create it
manually and get ovirt to handle it?
Regrads,
5:48 p.m.
On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote:
Hi,
Another question: I need to connect 2 eths to a Fortigate cluster so I
need them to be in a bridge with single ip so it can connect to the DMZ.
As far as I can see, ovirt 3.2 is allowing me to create bonds and assign
logical network to them, but not to create a bridge. Can I create it
manually and get ovirt to handle it?
Indeed, ovirt does not support setting up a bridge with multiple
physical legs.
I do not recall having tried that, but I have a suspition that Engine
may be confused if such a bridge is to be reported by Vdsm.
If that happens, I suggest that you list these two eths in vdsm.conf's
hidden_nics. Then, they would not show up on ovirt's network editing
tools and would not tempt admins to use them for other purposes.
Dan.
Please test it out and r
7:50 p.m.
Hi Dan
By hiding the eths, will I be able to use the bridge to assign it to a vm?
Regards,
El 09/09/13 19:48, Dan Kenigsberg escribió:
On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote:
> Hi,
>
> Another question: I need to connect 2 eths to a Fortigate cluster so I
> need them to be in a bridge with single ip so it can connect to the DMZ.
> As far as I can see, ovirt 3.2 is allowing me to create bonds and assign
> logical network to them, but not to create a bridge. Can I create it
> manually and get ovirt to handle it?
Indeed, ovirt does not support setting up a bridge with multiple
physical legs.
I do not recall having tried that, but I have a suspition that Engine
may be confused if such a bridge is to be reported by Vdsm.
If that happens, I suggest that you list these two eths in vdsm.conf's
hidden_nics. Then, they would not show up on ovirt's network editing
tools and would not tempt admins to use them for other purposes.
Dan.
Please test it out and r
7:17 a.m.
----- Original Message -----
From: "Juan Pablo Lorier" <jplorier(a)gmail.com>
To: "Dan Kenigsberg" <danken(a)redhat.com>
Cc: "users" <users(a)ovirt.org>
Sent: Tuesday, September 10, 2013 2:50:08 AM
Subject: Re: [Users] Bridge for logical network
Hi Dan
By hiding the eths, will I be able to use the bridge to assign it to a vm?
Regards,
As long as the bridge is defined on engine side and reported by VDSM you should
be able to assign vms to it.
Please report if hiding the additional nics (only one nic shouldn't be hidden) works
for you.
El 09/09/13 19:48, Dan Kenigsberg escribió:
> On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote:
>> Hi,
>>
>> Another question: I need to connect 2 eths to a Fortigate cluster so I
>> need them to be in a bridge with single ip so it can connect to the DMZ.
>> As far as I can see, ovirt 3.2 is allowing me to create bonds and assign
>> logical network to them, but not to create a bridge. Can I create it
>> manually and get ovirt to handle it?
> Indeed, ovirt does not support setting up a bridge with multiple
> physical legs.
>
> I do not recall having tried that, but I have a suspition that Engine
> may be confused if such a bridge is to be reported by Vdsm.
The engine do complains about a bridge created on more than a single interface.
>
> If that happens, I suggest that you list these two eths in vdsm.conf's
> hidden_nics. Then, they would not show up on ovirt's network editing
> tools and would not tempt admins to use them for other purposes.
>
> Dan.
> Please test it out and r
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
8:51 a.m.
Hi Dan and Moti,
Why can't vdsm get the bridge interfase just as it gets the bonds?. Both
are "virtual" interfaces, so it would be easier to list the bridge as an
interfase and assign the LN to it.
If there's no way to do this, I'll try to hide one nic and see what happens.
Regards,
On 10/09/13 09:17, Moti Asayag wrote:
----- Original Message -----
> From: "Juan Pablo Lorier" <jplorier(a)gmail.com>
> To: "Dan Kenigsberg" <danken(a)redhat.com>
> Cc: "users" <users(a)ovirt.org>
> Sent: Tuesday, September 10, 2013 2:50:08 AM
> Subject: Re: [Users] Bridge for logical network
>
> Hi Dan
>
> By hiding the eths, will I be able to use the bridge to assign it to a vm?
> Regards,
>
As long as the bridge is defined on engine side and reported by VDSM you should
be able to assign vms to it.
Please report if hiding the additional nics (only one nic shouldn't be hidden) works
for you.
> El 09/09/13 19:48, Dan Kenigsberg escribió:
>> On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote:
>>> Hi,
>>>
>>> Another question: I need to connect 2 eths to a Fortigate cluster so I
>>> need them to be in a bridge with single ip so it can connect to the DMZ.
>>> As far as I can see, ovirt 3.2 is allowing me to create bonds and assign
>>> logical network to them, but not to create a bridge. Can I create it
>>> manually and get ovirt to handle it?
>> Indeed, ovirt does not support setting up a bridge with multiple
>> physical legs.
>>
>> I do not recall having tried that, but I have a suspition that Engine
>> may be confused if such a bridge is to be reported by Vdsm.
The engine do complains about a bridge created on more than a single interface.
>> If that happens, I suggest that you list these two eths in vdsm.conf's
>> hidden_nics. Then, they would not show up on ovirt's network editing
>> tools and would not tempt admins to use them for other purposes.
>>
>> Dan.
>> Please test it out and r
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
4:30 p.m.
On Tue, Sep 10, 2013 at 10:51:45AM -0300, Juan Pablo Lorier wrote:
Hi Dan and Moti,
Why can't vdsm get the bridge interfase just as it gets the bonds?. Both
are "virtual" interfaces, so it would be easier to list the bridge as an
interfase and assign the LN to it.
If there's no way to do this, I'll try to hide one nic and see what happens.
Regards,
oVirt supports only a limited set of Linux networking topologies. Partly
because we have only limited resources, and partly because of covering
everything would complicate life to most virt users.
I would love to see an RFE on bugzilla, explaining why this ability is
important to oVirt users. If the suggested vdsm hacks are widely used,
or if someone with interest in this posts patches, it would make sense
to streamline this feature into oVirt.
2:25 p.m.
Hi,
I've decided to solve the issue externally to avoid experimenting with
the production environment.
Anyway, I'll open a bug to explain in detail the use case and see if
it's applicable for a general purpose.
I thank you all for the help.
By the way, I was looking at neutron integration and it looks promising,
I'm not sure I totally get how it'll work and how complex the setup can
be, but looks like it can give a hand on cases like mine.
Regards,
On 10/09/13 09:17, Moti Asayag wrote:
----- Original Message -----
> From: "Juan Pablo Lorier" <jplorier(a)gmail.com>
> To: "Dan Kenigsberg" <danken(a)redhat.com>
> Cc: "users" <users(a)ovirt.org>
> Sent: Tuesday, September 10, 2013 2:50:08 AM
> Subject: Re: [Users] Bridge for logical network
>
> Hi Dan
>
> By hiding the eths, will I be able to use the bridge to assign it to a vm?
> Regards,
>
As long as the bridge is defined on engine side and reported by VDSM you should
be able to assign vms to it.
Please report if hiding the additional nics (only one nic shouldn't be hidden) works
for you.
> El 09/09/13 19:48, Dan Kenigsberg escribió:
>> On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote:
>>> Hi,
>>>
>>> Another question: I need to connect 2 eths to a Fortigate cluster so I
>>> need them to be in a bridge with single ip so it can connect to the DMZ.
>>> As far as I can see, ovirt 3.2 is allowing me to create bonds and assign
>>> logical network to them, but not to create a bridge. Can I create it
>>> manually and get ovirt to handle it?
>> Indeed, ovirt does not support setting up a bridge with multiple
>> physical legs.
>>
>> I do not recall having tried that, but I have a suspition that Engine
>> may be confused if such a bridge is to be reported by Vdsm.
The engine do complains about a bridge created on more than a single interface.
>> If that happens, I suggest that you list these two eths in vdsm.conf's
>> hidden_nics. Then, they would not show up on ovirt's network editing
>> tools and would not tempt admins to use them for other purposes.
>>
>> Dan.
>> Please test it out and r
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
7:39 a.m.
On Mon, Sep 09, 2013 at 09:50:08PM -0300, Juan Pablo Lorier wrote:
Hi Dan
By hiding the eths, will I be able to use the bridge to assign it to a vm?
I was not aware that you would like to connect VMs to the same bridge
that connects between the two networks. I think, that if you list one of
the nics as hidden, this should work - but I have not tried. Please do!
Regards,
El 09/09/13 19:48, Dan Kenigsberg escribió:
>On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote:
>>Hi,
>>
>>Another question: I need to connect 2 eths to a Fortigate cluster so I
>>need them to be in a bridge with single ip so it can connect to the DMZ.
>>As far as I can see, ovirt 3.2 is allowing me to create bonds and assign
>>logical network to them, but not to create a bridge. Can I create it
>>manually and get ovirt to handle it?
>Indeed, ovirt does not support setting up a bridge with multiple
>physical legs.
>
>I do not recall having tried that, but I have a suspition that Engine
>may be confused if such a bridge is to be reported by Vdsm.
>
>If that happens, I suggest that you list these two eths in vdsm.conf's
>hidden_nics. Then, they would not show up on ovirt's network editing
>tools and would not tempt admins to use them for other purposes.
>
>Dan.
>Please test it out and r
4120
days inactive
4122
days old
7 comments
3 participants
participants (3)
-
Dan Kenigsberg -
Juan Pablo Lorier -
Moti Asayag