Re: [ovirt-users] Promiscuous Mode

It's great to know that it's working. Best of luck Clint. On 03/05/2016 09:09 PM, clint(a)theboggios.com wrote: > > On 2016-03-05 13:34, combuster wrote: >> >> Correct procedure would be: >> >> 1. On each of your ovirt nodes run: >> >> yum install vdsm-hook-macspoof >> >> 2. On the engine run: >> >> sudo engine-config -s "UserDefinedVMProperties=macspoof=^(true|false)$" >> >> 3. Edit OpenVPN virtual machine settings and add a custom property >> containing macspoof keyword and set the value "true" for it. >> >> If you want to remove filtering for a single interface, then replace >> steps 2 and 3 as outlined in the README. >> >> Kind regards, >> >> Ivan >> >> On 03/05/2016 08:21 PM, clint(a)theboggios.com wrote: >>> >>> On 2016-03-05 13:13, combuster wrote: >>>> >>>> Ignore the link (minor accident while pasting). Yum will download the >>>> appropriate one from the repos. >>>> >>>> On 03/05/2016 08:09 PM, combuster wrote: >>>> >>>>> Just the hook rpm (vdsm-hook-macspoof [1]). >>>>> >>>>> Ivan >>>>> >>>>> On 03/05/2016 08:02 PM, Christopher Young wrote: >>>>> >>>>> I had a related question on this. >>>>> >>>>> When it comes to ovirt-node or rhev-h, is there anything required to >>>>> be installed on the hypervisor hosts themselves? >>>>> >>>>> Thanks, >>>>> >>>>> Chris >>>>> On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com&gt; wrote: >>>>> Hi Clint, you might want to check the macspoof hook features here: >>>>> >>>>> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof [2] >>>>> >>>>> This should override arp/spoofing filtering, that might be the >>>>> cause of your issues with OpenVPN setup (first guess). >>>>> >>>>> On 03/05/2016 07:30 PM, Clint Boggio wrote: >>>>> I am deploying an OpenVPN server in my OVirt environment and I've >>>>> come to a dead stop with the developer support on a topic related to >>>>> OVirt configuration. >>>>> >>>>> The developer wants me to put the VM's underlying NIC into >>>>> promiscuous mode. >>>>> >>>>> I've seen this in a VMware environment and I know what they are >>>>> asking me to do, and I'm wondering if there is a clear way to do >>>>> this in my OVirt environment. >>>>> >>>>> I found "port mirroring" but no "promiscuous mode" >>>>> >>>>> Cheers and thank you ! >>>>> _______________________________________________ >>>>> Users mailing list >>>>> Users(a)ovirt.org >>>>> http://lists.ovirt.org/mailman/listinfo/users [3] >>>>> >>>>> _______________________________________________ >>>>> Users mailing list >>>>> Users(a)ovirt.org >>>>> http://lists.ovirt.org/mailman/listinfo/users [3] >>>> >>>> >>>> >>>> >>>> Links: >>>> ------ >>>> [1] >>>> >>>> http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m... >>>> [2] https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof >>>> [3] http://lists.ovirt.org/mailman/listinfo/users >>> >>> >>> >>> Thank you very much. Reading the README it appears that there is a >>> series of commands to run on the engine to make the options to remove >>> filtering from the vNIC, or the whole VM available. What purpose is filled >>> by the two scripts that are included in the git, and where do I put them so >>> that they will be utilized if that's even necessary ? > > > > Ivan, because of YOU, I get me weekend back ! It works and OVPN is up and > running. > > Thank you SO MUCH ! _______________________________________________ Users mailing list Users(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/users