On Wed, Feb 26, 2020 at 7:02 PM Gianluca Cecchi <gianluca.cecchi(a)gmail.com>
wrote:
On Wed, Feb 26, 2020 at 6:01 PM Dominik Holler
<dholler(a)redhat.com> wrote:
>
>
> On Wed, Feb 26, 2020 at 10:16 AM Gianluca Cecchi <
> gianluca.cecchi(a)gmail.com> wrote:
>
>> Hello,
>> I have an environment with oVirt 4.3.8.
>> All seems ok from a configuration point of view, but if I use OVN based
>> interfaces on two VMs, they are not able to ping, both if I put them on the
>> same host and if I put on different hosts.
>> At this point they are both running on the same host and their only vnic
>> is on ovn172 network (defined as 192.168.172.0/24).
>>
>
> Did the VMs got an IP address via DHCP from OVN?
>
No, both VMs are static ip
> Can you please create a new OVN network with port security disabled and
> try again?
>
Ah ah! I forgot this thing of the port security again....
Putting the Vms on a port security disabled OVN network they are able to
ping each other both when on same host and on hosts sitting in different
physical datacenters....
Is it possible to change to disabled an existing OVN network with port
security enabled?
It seems all is greyed out when editing
Yes, you have to disable directly via OpenStack API.
Please note that the attribute of the network applies only to ports that
are created after the attribute is changed on the network.
So if you want to disable port security for an existing port, you have to
disable this on the port via the OpenStack API.
Thanks. You already told me this in the past....
I am always happy to hear your feedback!
Gianluca