Hi Yukihiro

Thank you very much for the suggestion.
We will have a look into it and let you know about it.

Best Regards,
Santosh Thapa Magar

-----Original Message-----
From: [email protected] <[email protected]> 
Sent: Thursday, November 26, 2020 6:49 PM
To: タパマガルサントス <[email protected]>; [email protected]
Subject: Re: [onap-discuss] [Frankfurt]vFWCL Verification Issue

Hi,

I'm sorry, I missed reading the end of your post.
 
Using GRE tunnels inside VMs with OVS firewall driver.
If GRE tunnels from VM to VM are going to be used, the native OVS firewall 
implementation requires nf_conntrack_proto_gre module to be loaded in the 
kernel on nodes running the Open vSwitch agent. It can be loaded with the 
command:
 
# modprobe nf_conntrack_proto_gre
 
Some Linux distributions have files that can be used to automatically load 
kernel modules at boot time, for example, /etc/modules. Check with your 
distribution for further information.
This isn’t necessary to use gre tunnel network type Neutron.
 
If you didn't load nf_conntrack_proto_gre, you'll need to load it. Then you can 
ping.
 
[root@onap01 ~(keystone_admin)]# lsmod | grep conntrack
nf_conntrack_netlink    36354  0
nfnetlink              14519  3 nf_conntrack_netlink
nf_conntrack_ipv6      18935  4
nf_defrag_ipv6        35104  2 openvswitch,nf_conntrack_ipv6
nf_conntrack_ipv4      15053  3
nf_defrag_ipv4        12729  1 nf_conntrack_ipv4
xt_conntrack          12760  5
nf_conntrack          139224  8 
openvswitch,nf_nat,nf_nat_ipv4,nf_nat_ipv6,xt_conntrack,nf_conntrack_netlink,nf_conntrack_ipv4,nf_conntrack_ipv6
libcrc32c              12644  5 
xfs,dm_persistent_data,openvswitch,nf_nat,nf_conntrack

Best Regards
Yukihiro Kishimoto 




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22552): https://lists.onap.org/g/onap-discuss/message/22552
Mute This Topic: https://lists.onap.org/mt/76398449/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to