Re: [ovirt-users] Promiscuous Mode

Question: There is no yum functionality on ovirt-node/RHEV-H, so how does one go about this in that scenario? On Sat, Mar 5, 2016 at 3:32 PM, combuster <combuster(a)gmail.com&gt; wrote: > It's great to know that it's working. > > Best of luck Clint. > > > On 03/05/2016 09:09 PM, clint(a)theboggios.com wrote: >> On 2016-03-05 13:34, combuster wrote: >>> Correct procedure would be: >>> >>> 1. On each of your ovirt nodes run: >>> >>> yum install vdsm-hook-macspoof >>> >>> 2. On the engine run: >>> >>> sudo engine-config -s "UserDefinedVMProperties=macspoof=^(true|false)$" >>> >>> 3. Edit OpenVPN virtual machine settings and add a custom property >>> containing macspoof keyword and set the value "true" for it. >>> >>> If you want to remove filtering for a single interface, then replace >>> steps 2 and 3 as outlined in the README. >>> >>> Kind regards, >>> >>> Ivan >>> >>> On 03/05/2016 08:21 PM, clint(a)theboggios.com wrote: >>>> On 2016-03-05 13:13, combuster wrote: >>>>> Ignore the link (minor accident while pasting). Yum will download the >>>>> appropriate one from the repos. >>>>> >>>>> On 03/05/2016 08:09 PM, combuster wrote: >>>>> >>>>>> Just the hook rpm (vdsm-hook-macspoof [1]). >>>>>> >>>>>> Ivan >>>>>> >>>>>> On 03/05/2016 08:02 PM, Christopher Young wrote: >>>>>> >>>>>> I had a related question on this. >>>>>> >>>>>> When it comes to ovirt-node or rhev-h, is there anything required to >>>>>> be installed on the hypervisor hosts themselves? >>>>>> >>>>>> Thanks, >>>>>> >>>>>> Chris >>>>>> On Mar 5, 2016 1:47 PM, "combuster" <combuster(a)gmail.com&gt; wrote: >>>>>> Hi Clint, you might want to check the macspoof hook features here: >>>>>> >>>>>> https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof [2] >>>>>> >>>>>> This should override arp/spoofing filtering, that might be the >>>>>> cause of your issues with OpenVPN setup (first guess). >>>>>> >>>>>> On 03/05/2016 07:30 PM, Clint Boggio wrote: >>>>>> I am deploying an OpenVPN server in my OVirt environment and I've >>>>>> come to a dead stop with the developer support on a topic related to >>>>>> OVirt configuration. >>>>>> >>>>>> The developer wants me to put the VM's underlying NIC into >>>>>> promiscuous mode. >>>>>> >>>>>> I've seen this in a VMware environment and I know what they are >>>>>> asking me to do, and I'm wondering if there is a clear way to do >>>>>> this in my OVirt environment. >>>>>> >>>>>> I found "port mirroring" but no "promiscuous mode" >>>>>> >>>>>> Cheers and thank you ! >>>>>> _______________________________________________ >>>>>> Users mailing list >>>>>> Users(a)ovirt.org >>>>>> http://lists.ovirt.org/mailman/listinfo/users [3] >>>>>> >>>>>> _______________________________________________ >>>>>> Users mailing list >>>>>> Users(a)ovirt.org >>>>>> http://lists.ovirt.org/mailman/listinfo/users [3] >>>>> >>>>> >>>>> >>>>> Links: >>>>> ------ >>>>> [1] >>>>> >>>>> http://resources.ovirt.org/pub/ovirt-3.5/rpm/el7Server/noarch/vdsm-hook-m... >>>>> [2] https://github.com/oVirt/vdsm/tree/master/vdsm_hooks/macspoof >>>>> [3] http://lists.ovirt.org/mailman/listinfo/users >>>> >>>> >>>> Thank you very much. Reading the README it appears that there is a >>>> series of commands to run on the engine to make the options to remove >>>> filtering from the vNIC, or the whole VM available. What purpose is filled >>>> by the two scripts that are included in the git, and where do I put them so >>>> that they will be utilized if that's even necessary ? >> >> >> Ivan, because of YOU, I get me weekend back ! It works and OVPN is up and >> running. >> >> Thank you SO MUCH ! > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users