[Users] Bridge for logical network

Hi, Another question: I need to connect 2 eths to a Fortigate cluster so I need them to be in a bridge with single ip so it can connect to the DMZ. As far as I can see, ovirt 3.2 is allowing me to create bonds and assign logical network to them, but not to create a bridge. Can I create it manually and get ovirt to handle it? Regrads,

On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote:
Hi,
Another question: I need to connect 2 eths to a Fortigate cluster so I need them to be in a bridge with single ip so it can connect to the DMZ. As far as I can see, ovirt 3.2 is allowing me to create bonds and assign logical network to them, but not to create a bridge. Can I create it manually and get ovirt to handle it?
Indeed, ovirt does not support setting up a bridge with multiple physical legs. I do not recall having tried that, but I have a suspition that Engine may be confused if such a bridge is to be reported by Vdsm. If that happens, I suggest that you list these two eths in vdsm.conf's hidden_nics. Then, they would not show up on ovirt's network editing tools and would not tempt admins to use them for other purposes. Dan. Please test it out and r

Hi Dan By hiding the eths, will I be able to use the bridge to assign it to a vm? Regards, El 09/09/13 19:48, Dan Kenigsberg escribió:
Hi,
Another question: I need to connect 2 eths to a Fortigate cluster so I need them to be in a bridge with single ip so it can connect to the DMZ. As far as I can see, ovirt 3.2 is allowing me to create bonds and assign logical network to them, but not to create a bridge. Can I create it manually and get ovirt to handle it? Indeed, ovirt does not support setting up a bridge with multiple
On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote: physical legs.
I do not recall having tried that, but I have a suspition that Engine may be confused if such a bridge is to be reported by Vdsm.
If that happens, I suggest that you list these two eths in vdsm.conf's hidden_nics. Then, they would not show up on ovirt's network editing tools and would not tempt admins to use them for other purposes.
Dan. Please test it out and r

----- Original Message -----
From: "Juan Pablo Lorier" <jplorier@gmail.com> To: "Dan Kenigsberg" <danken@redhat.com> Cc: "users" <users@ovirt.org> Sent: Tuesday, September 10, 2013 2:50:08 AM Subject: Re: [Users] Bridge for logical network
Hi Dan
By hiding the eths, will I be able to use the bridge to assign it to a vm? Regards,
As long as the bridge is defined on engine side and reported by VDSM you should be able to assign vms to it. Please report if hiding the additional nics (only one nic shouldn't be hidden) works for you.
El 09/09/13 19:48, Dan Kenigsberg escribió:
Hi,
Another question: I need to connect 2 eths to a Fortigate cluster so I need them to be in a bridge with single ip so it can connect to the DMZ. As far as I can see, ovirt 3.2 is allowing me to create bonds and assign logical network to them, but not to create a bridge. Can I create it manually and get ovirt to handle it? Indeed, ovirt does not support setting up a bridge with multiple
On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote: physical legs.
I do not recall having tried that, but I have a suspition that Engine may be confused if such a bridge is to be reported by Vdsm.
The engine do complains about a bridge created on more than a single interface.
If that happens, I suggest that you list these two eths in vdsm.conf's hidden_nics. Then, they would not show up on ovirt's network editing tools and would not tempt admins to use them for other purposes.
Dan. Please test it out and r
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Hi Dan and Moti, Why can't vdsm get the bridge interfase just as it gets the bonds?. Both are "virtual" interfaces, so it would be easier to list the bridge as an interfase and assign the LN to it. If there's no way to do this, I'll try to hide one nic and see what happens. Regards, On 10/09/13 09:17, Moti Asayag wrote:
----- Original Message -----
From: "Juan Pablo Lorier" <jplorier@gmail.com> To: "Dan Kenigsberg" <danken@redhat.com> Cc: "users" <users@ovirt.org> Sent: Tuesday, September 10, 2013 2:50:08 AM Subject: Re: [Users] Bridge for logical network
Hi Dan
By hiding the eths, will I be able to use the bridge to assign it to a vm? Regards,
As long as the bridge is defined on engine side and reported by VDSM you should be able to assign vms to it.
Please report if hiding the additional nics (only one nic shouldn't be hidden) works for you.
El 09/09/13 19:48, Dan Kenigsberg escribió:
Hi,
Another question: I need to connect 2 eths to a Fortigate cluster so I need them to be in a bridge with single ip so it can connect to the DMZ. As far as I can see, ovirt 3.2 is allowing me to create bonds and assign logical network to them, but not to create a bridge. Can I create it manually and get ovirt to handle it? Indeed, ovirt does not support setting up a bridge with multiple
On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote: physical legs.
I do not recall having tried that, but I have a suspition that Engine may be confused if such a bridge is to be reported by Vdsm. The engine do complains about a bridge created on more than a single interface.
If that happens, I suggest that you list these two eths in vdsm.conf's hidden_nics. Then, they would not show up on ovirt's network editing tools and would not tempt admins to use them for other purposes.
Dan. Please test it out and r
Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

On Tue, Sep 10, 2013 at 10:51:45AM -0300, Juan Pablo Lorier wrote:
Hi Dan and Moti,
Why can't vdsm get the bridge interfase just as it gets the bonds?. Both are "virtual" interfaces, so it would be easier to list the bridge as an interfase and assign the LN to it. If there's no way to do this, I'll try to hide one nic and see what happens. Regards,
oVirt supports only a limited set of Linux networking topologies. Partly because we have only limited resources, and partly because of covering everything would complicate life to most virt users. I would love to see an RFE on bugzilla, explaining why this ability is important to oVirt users. If the suggested vdsm hacks are widely used, or if someone with interest in this posts patches, it would make sense to streamline this feature into oVirt.

Hi, I've decided to solve the issue externally to avoid experimenting with the production environment. Anyway, I'll open a bug to explain in detail the use case and see if it's applicable for a general purpose. I thank you all for the help. By the way, I was looking at neutron integration and it looks promising, I'm not sure I totally get how it'll work and how complex the setup can be, but looks like it can give a hand on cases like mine. Regards, On 10/09/13 09:17, Moti Asayag wrote:
----- Original Message -----
From: "Juan Pablo Lorier" <jplorier@gmail.com> To: "Dan Kenigsberg" <danken@redhat.com> Cc: "users" <users@ovirt.org> Sent: Tuesday, September 10, 2013 2:50:08 AM Subject: Re: [Users] Bridge for logical network
Hi Dan
By hiding the eths, will I be able to use the bridge to assign it to a vm? Regards,
As long as the bridge is defined on engine side and reported by VDSM you should be able to assign vms to it.
Please report if hiding the additional nics (only one nic shouldn't be hidden) works for you.
El 09/09/13 19:48, Dan Kenigsberg escribió:
Hi,
Another question: I need to connect 2 eths to a Fortigate cluster so I need them to be in a bridge with single ip so it can connect to the DMZ. As far as I can see, ovirt 3.2 is allowing me to create bonds and assign logical network to them, but not to create a bridge. Can I create it manually and get ovirt to handle it? Indeed, ovirt does not support setting up a bridge with multiple
On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote: physical legs.
I do not recall having tried that, but I have a suspition that Engine may be confused if such a bridge is to be reported by Vdsm. The engine do complains about a bridge created on more than a single interface.
If that happens, I suggest that you list these two eths in vdsm.conf's hidden_nics. Then, they would not show up on ovirt's network editing tools and would not tempt admins to use them for other purposes.
Dan. Please test it out and r
Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

On Mon, Sep 09, 2013 at 09:50:08PM -0300, Juan Pablo Lorier wrote:
Hi Dan
By hiding the eths, will I be able to use the bridge to assign it to a vm?
I was not aware that you would like to connect VMs to the same bridge that connects between the two networks. I think, that if you list one of the nics as hidden, this should work - but I have not tried. Please do!
Regards,
El 09/09/13 19:48, Dan Kenigsberg escribió:
Hi,
Another question: I need to connect 2 eths to a Fortigate cluster so I need them to be in a bridge with single ip so it can connect to the DMZ. As far as I can see, ovirt 3.2 is allowing me to create bonds and assign logical network to them, but not to create a bridge. Can I create it manually and get ovirt to handle it? Indeed, ovirt does not support setting up a bridge with multiple
On Mon, Sep 09, 2013 at 03:19:48PM -0300, Juan Pablo Lorier wrote: physical legs.
I do not recall having tried that, but I have a suspition that Engine may be confused if such a bridge is to be reported by Vdsm.
If that happens, I suggest that you list these two eths in vdsm.conf's hidden_nics. Then, they would not show up on ovirt's network editing tools and would not tempt admins to use them for other purposes.
Dan. Please test it out and r
participants (3)
-
Dan Kenigsberg
-
Juan Pablo Lorier
-
Moti Asayag