On Wed, Feb 26, 2020 at 7:02 PM Gianluca Cecchi <gianluca.cecchi@gmail.com> wrote:
On Wed, Feb 26, 2020 at 6:01 PM Dominik Holler <dholler@redhat.com> wrote:


On Wed, Feb 26, 2020 at 10:16 AM Gianluca Cecchi <gianluca.cecchi@gmail.com> wrote:
Hello,
I have an environment with oVirt 4.3.8.
All seems ok from a configuration point of view, but if I use OVN based interfaces on two VMs, they are not able to ping, both if I put them on the same host and if I put on different hosts.
At this point they are both running on the same host and their only vnic is on ovn172 network (defined as 192.168.172.0/24).

Did the VMs got an IP address via DHCP from OVN?

No, both VMs are static ip 
 
Can you please create a new OVN network with port security disabled and try again?

Ah ah! I forgot this thing of the port security again....
Putting the Vms on a port security disabled OVN network they are able to ping each other both when on same host and on hosts sitting in different physical datacenters....

Is it possible to change to disabled an existing OVN network with port security enabled?
It seems all is greyed out when editing

Yes, you have to disable directly via OpenStack API.
Please note that the attribute of the network applies only to ports that are created after the attribute is changed on the network.
So if you want to disable port security for an existing port, you have to disable this on the port via the OpenStack API.

 

Thanks. You already told me this in the past....


I am always happy to hear your feedback!
 
Gianluca