Ovirt - Bonded NICs - using as tagged and untagged at the same time

Hello, I have searched and have not found an answer with respects to Ovirt and VLAN tagging. I'm hoping someone will be able to assist. I am using two 10GB interfaces bonded 802.3ad for our second interface. I have created several interfaces that are tagged with specific VLANs and 1 interface called 20GBBond that is untagged. The issue we are experiencing is when I assign a vlan to an interface I can no longer assign it to the 20GBBond on a VM. For example, ETH1 is tagged with VLAN70 is tagged and assigned to VM1. 20GBBond untagged interface is assigned to VM2 and within the VM i create the tagged sub interface eth1.70. Once I create the single ETH1 VLAN70 interface on VM1, I can no longer use the sub interface eth1.70 created on VM2. Is there a way to get around this if it is a limitation.

Just to make it clear, by "make an interface" you mean you created new logical VM networks, one without VLAN set, the rest with VLAN? You should attach those networks to your bonding in Setup Networks dialog. Then you should be able to connect VMs to any of these networks. On untagged VM NIC you can create whatever VLAN interface you want. What do you mean you can no longer use it. You are trying to ping from VM1 (connected to VLAN network) to VM2 (connected to untagged network, but with VLAN interface inside VM)? 2018-10-25 22:17 GMT+02:00 <pslawrence@comcast.net>:
Hello,
I have searched and have not found an answer with respects to Ovirt and VLAN tagging. I'm hoping someone will be able to assist.
I am using two 10GB interfaces bonded 802.3ad for our second interface. I have created several interfaces that are tagged with specific VLANs and 1 interface called 20GBBond that is untagged.
The issue we are experiencing is when I assign a vlan to an interface I can no longer assign it to the 20GBBond on a VM.
For example, ETH1 is tagged with VLAN70 is tagged and assigned to VM1. 20GBBond untagged interface is assigned to VM2 and within the VM i create the tagged sub interface eth1.70. Once I create the single ETH1 VLAN70 interface on VM1, I can no longer use the sub interface eth1.70 created on VM2.
Is there a way to get around this if it is a limitation. _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community- guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/ message/O23ICVSO5SHTK5PX6ZFB7XB3ROWJOHAL/

Correct. On the host i have 1 management interface (ovirtmngmt) and 1 bonded pair of 10GB interfaces (bond0) Under Networks I have created the following networks. VLAN70 - Tagged with 70 20GBBond - no tagging In the host I added both VLAN70 and 20GBBond via the Setup Network. I dragged the two networks interfaces and dropped on the bond0 nics. I created two VMs and assigned interfaces. Test1 - Attached VLAN70 I ping 10.0.70.1 (the gateway) and it works. Test2 - Attached 20GBBond and create a eth1.70 interface in the OS. I can not ping 10.0.70.1, since VLAN70 is attached to Test1. If I stop Test1, remove the VLAN70 and delete the VLAN70 network I can then ping 10.0.70.1 from the eth1.70 interface on Test2. However, both can not exist at the same time.

That sounds like a valid configuration. Edy, what do you think? 2018-10-26 16:24 GMT+02:00 <pslawrence@comcast.net>:
Correct. On the host i have 1 management interface (ovirtmngmt) and 1 bonded pair of 10GB interfaces (bond0)
Under Networks I have created the following networks. VLAN70 - Tagged with 70 20GBBond - no tagging
In the host I added both VLAN70 and 20GBBond via the Setup Network. I dragged the two networks interfaces and dropped on the bond0 nics.
I created two VMs and assigned interfaces. Test1 - Attached VLAN70 I ping 10.0.70.1 (the gateway) and it works.
Test2 - Attached 20GBBond and create a eth1.70 interface in the OS. I can not ping 10.0.70.1, since VLAN70 is attached to Test1. If I stop Test1, remove the VLAN70 and delete the VLAN70 network I can then ping 10.0.70.1 from the eth1.70 interface on Test2. However, both can not exist at the same time. _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community- guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/ message/RUXROJVCPYWH37EGY22OMPLF5RQJ6SFL/

I think that this has been already asked: https://lists.ovirt.org/archives/list/users@ovirt.org/thread/USPMFD3NUAGE4PL... It is not supported because of how traffic is passed to a vlan by its base interface. When packets arrive to the nic and on top of it there is a vlan, any packet with a tag that matches that vlan will be forwarded to it and from there to the bridge. Leftovers (any other tags or non tag packers) will get forwarded to the bridge which is directly connected to the nic. So you cannot have one tag and one untag using the same base interface (bond in your case). Thanks, Edy. On Mon, Oct 29, 2018 at 5:29 PM Petr Horacek <phoracek@redhat.com> wrote:
That sounds like a valid configuration. Edy, what do you think?
2018-10-26 16:24 GMT+02:00 <pslawrence@comcast.net>:
Correct. On the host i have 1 management interface (ovirtmngmt) and 1 bonded pair of 10GB interfaces (bond0)
Under Networks I have created the following networks. VLAN70 - Tagged with 70 20GBBond - no tagging
In the host I added both VLAN70 and 20GBBond via the Setup Network. I dragged the two networks interfaces and dropped on the bond0 nics.
I created two VMs and assigned interfaces. Test1 - Attached VLAN70 I ping 10.0.70.1 (the gateway) and it works.
Test2 - Attached 20GBBond and create a eth1.70 interface in the OS. I can not ping 10.0.70.1, since VLAN70 is attached to Test1. If I stop Test1, remove the VLAN70 and delete the VLAN70 network I can then ping 10.0.70.1 from the eth1.70 interface on Test2. However, both can not exist at the same time. _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/RUXROJVCPYWH37...

Thank you for responding. Do you think this would this work with OVS? On 10/29/2018 2:39 PM, Edward Haas wrote:
I think that this has been already asked: https://lists.ovirt.org/archives/list/users@ovirt.org/thread/USPMFD3NUAGE4PL...
It is not supported because of how traffic is passed to a vlan by its base interface. When packets arrive to the nic and on top of it there is a vlan, any packet with a tag that matches that vlan will be forwarded to it and from there to the bridge. Leftovers (any other tags or non tag packers) will get forwarded to the bridge which is directly connected to the nic.
So you cannot have one tag and one untag using the same base interface (bond in your case).
Thanks, Edy.
On Mon, Oct 29, 2018 at 5:29 PM Petr Horacek <phoracek@redhat.com <mailto:phoracek@redhat.com>> wrote:
That sounds like a valid configuration. Edy, what do you think?
2018-10-26 16:24 GMT+02:00 <pslawrence@comcast.net <mailto:pslawrence@comcast.net>>:
Correct. On the host i have 1 management interface (ovirtmngmt) and 1 bonded pair of 10GB interfaces (bond0)
Under Networks I have created the following networks. VLAN70 - Tagged with 70 20GBBond - no tagging
In the host I added both VLAN70 and 20GBBond via the Setup Network. I dragged the two networks interfaces and dropped on the bond0 nics.
I created two VMs and assigned interfaces. Test1 - Attached VLAN70 I ping 10.0.70.1 (the gateway) and it works.
Test2 - Attached 20GBBond and create a eth1.70 interface in the OS. I can not ping 10.0.70.1, since VLAN70 is attached to Test1. If I stop Test1, remove the VLAN70 and delete the VLAN70 network I can then ping 10.0.70.1 from the eth1.70 interface on Test2. However, both can not exist at the same time. _______________________________________________ Users mailing list -- users@ovirt.org <mailto:users@ovirt.org> To unsubscribe send an email to users-leave@ovirt.org <mailto:users-leave@ovirt.org> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/RUXROJVCPYWH37...

On Tue, Oct 30, 2018 at 3:32 AM Patrick Lawrence <pslawrence@comcast.net> wrote:
Thank you for responding. Do you think this would this work with OVS?
Yes, if support for it will be added to our OVN solution. For this to work, we will need: - Use OVN (external network) solution in oVirt. - Use OVS cluster in order to connect the external network to the host network using physnet. - Introduce support in the OVN solution to enable trunk ports towards the VM/s. For the last point an RFE is required. Thanks, Edy.
On 10/29/2018 2:39 PM, Edward Haas wrote:
I think that this has been already asked: https://lists.ovirt.org/archives/list/users@ovirt.org/thread/USPMFD3NUAGE4PL...
It is not supported because of how traffic is passed to a vlan by its base interface. When packets arrive to the nic and on top of it there is a vlan, any packet with a tag that matches that vlan will be forwarded to it and from there to the bridge. Leftovers (any other tags or non tag packers) will get forwarded to the bridge which is directly connected to the nic.
So you cannot have one tag and one untag using the same base interface (bond in your case).
Thanks, Edy.
On Mon, Oct 29, 2018 at 5:29 PM Petr Horacek <phoracek@redhat.com> wrote:
That sounds like a valid configuration. Edy, what do you think?
2018-10-26 16:24 GMT+02:00 <pslawrence@comcast.net>:
Correct. On the host i have 1 management interface (ovirtmngmt) and 1 bonded pair of 10GB interfaces (bond0)
Under Networks I have created the following networks. VLAN70 - Tagged with 70 20GBBond - no tagging
In the host I added both VLAN70 and 20GBBond via the Setup Network. I dragged the two networks interfaces and dropped on the bond0 nics.
I created two VMs and assigned interfaces. Test1 - Attached VLAN70 I ping 10.0.70.1 (the gateway) and it works.
Test2 - Attached 20GBBond and create a eth1.70 interface in the OS. I can not ping 10.0.70.1, since VLAN70 is attached to Test1. If I stop Test1, remove the VLAN70 and delete the VLAN70 network I can then ping 10.0.70.1 from the eth1.70 interface on Test2. However, both can not exist at the same time. _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/RUXROJVCPYWH37...
participants (4)
-
Edward Haas
-
Patrick Lawrence
-
Petr Horacek
-
pslawrence@comcast.net