Re: [ovirt-users] [Users] Cannot Ping CARP/Spoofed address
At the moment I'm not able to ping an IP with the macspoof hook installed on the host it runs on and macspoof=true on the VM... what could this be ? 2014-04-07 11:24 GMT+02:00 Dan Kenigsberg dan...@redhat.com: On Mon, Apr 07, 2014 at 05:01:07AM +0200, Matt . wrote: HI, I managed it by using the commands on that hook page. It seems that you enable it for a whole VM indeed. The hook has too options: either macspoof (for the whole VM) or ifacemacspoof (for a single vNIC). If one of them does the other thing, it's a bug that I'd like to know about (preferably with the complete log requested earlier). Nice! Thanks for the clarification! Cheers, Matt 2014-04-07 4:07 GMT+02:00 Matt . yamakasi@gmail.com: Hi Dan, Thank you for your reply! I have installed that hook and removed it again because I was not sure. Following the mailinglist it looks like it's globally doable, so it's actually not ? I understand that but what would be the right steps than ? For an example when you have a vm with 4 nics ? Cheers, Matt 2014-04-07 2:00 GMT+02:00 Dan Kenigsberg dan...@redhat.com: On Mon, Apr 07, 2014 at 01:36:02AM +0200, Matt . wrote: Hi Guys, I'm trying to use Mac spoofing for a Carp setup which is not working out well. Following here: https://forum.pfsense.org/index.php?topic=68137.0 and here http://lists.ovirt.org/pipermail/users/2013-October/017217.html This should be working by: engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.3 (The clusters are 3.3 compatible) In some strange way this is not working in any way. How can we solve this, as I'm out of options. Could you attach vdsm.log from vmCraete of the relevant VM down to the domxml passed to libvirt? Please note that it is possible to enable mac spoofing not in the global system level, but rather on a specific vNIC of a specific VM. For this, you'd need to install vdsm-hook-macspoof, device a vNIC profile with ifacemacspoof=True custom property, and attach it to your specific VM. Dan. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [Users] Cannot Ping CARP/Spoofed address
I already did a virsh -r dumpxml on the host and everything seemed to be fine. It's solved at the moment as there seemed to be some arp cache on the vm/host or switch and after changing the CARP IP to IP Alias, ping it, and set it back to CARP it works. Even reboots (vm's/hosts) didn't fix it... so I think pfSense was the one here that did something maybe as I was able to ping other hosts even from the pfsense box but not the IP's on the pfsense box... I had that earlier too with another cluster I thought. 2014-05-15 13:16 GMT+02:00 Dan Kenigsberg dan...@redhat.com: On Thu, May 15, 2014 at 12:02:06PM +0200, Matt . wrote: At the moment I'm not able to ping an IP with the macspoof hook installed on the host it runs on and macspoof=true on the VM... what could this be ? It could be many things. But let's try to rule out oVirt bugs. Take a look at virsh -r dumpxml vm-name Does it show a filterref (it should not). Can you ping the IP from within the VM? From another VM on the same host? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [Users] Cannot Ping CARP/Spoofed address
It seems that you can migrate a VM with macspoof=true from a host with the hook installed to a host without the hook installed you can still ping the host after migrating. Is this known/bug/normal ? 2014-05-15 13:40 GMT+02:00 Matt . yamakasi@gmail.com: I already did a virsh -r dumpxml on the host and everything seemed to be fine. It's solved at the moment as there seemed to be some arp cache on the vm/host or switch and after changing the CARP IP to IP Alias, ping it, and set it back to CARP it works. Even reboots (vm's/hosts) didn't fix it... so I think pfSense was the one here that did something maybe as I was able to ping other hosts even from the pfsense box but not the IP's on the pfsense box... I had that earlier too with another cluster I thought. 2014-05-15 13:16 GMT+02:00 Dan Kenigsberg dan...@redhat.com: On Thu, May 15, 2014 at 12:02:06PM +0200, Matt . wrote: At the moment I'm not able to ping an IP with the macspoof hook installed on the host it runs on and macspoof=true on the VM... what could this be ? It could be many things. But let's try to rule out oVirt bugs. Take a look at virsh -r dumpxml vm-name Does it show a filterref (it should not). Can you ping the IP from within the VM? From another VM on the same host? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Cannot Ping CARP/Spoofed address
On Mon, Apr 07, 2014 at 05:01:07AM +0200, Matt . wrote: HI, I managed it by using the commands on that hook page. It seems that you enable it for a whole VM indeed. The hook has too options: either macspoof (for the whole VM) or ifacemacspoof (for a single vNIC). If one of them does the other thing, it's a bug that I'd like to know about (preferably with the complete log requested earlier). Nice! Thanks for the clarification! Cheers, Matt 2014-04-07 4:07 GMT+02:00 Matt . yamakasi@gmail.com: Hi Dan, Thank you for your reply! I have installed that hook and removed it again because I was not sure. Following the mailinglist it looks like it's globally doable, so it's actually not ? I understand that but what would be the right steps than ? For an example when you have a vm with 4 nics ? Cheers, Matt 2014-04-07 2:00 GMT+02:00 Dan Kenigsberg dan...@redhat.com: On Mon, Apr 07, 2014 at 01:36:02AM +0200, Matt . wrote: Hi Guys, I'm trying to use Mac spoofing for a Carp setup which is not working out well. Following here: https://forum.pfsense.org/index.php?topic=68137.0 and here http://lists.ovirt.org/pipermail/users/2013-October/017217.html This should be working by: engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.3 (The clusters are 3.3 compatible) In some strange way this is not working in any way. How can we solve this, as I'm out of options. Could you attach vdsm.log from vmCraete of the relevant VM down to the domxml passed to libvirt? Please note that it is possible to enable mac spoofing not in the global system level, but rather on a specific vNIC of a specific VM. For this, you'd need to install vdsm-hook-macspoof, device a vNIC profile with ifacemacspoof=True custom property, and attach it to your specific VM. Dan. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] Cannot Ping CARP/Spoofed address
Hi Guys, I'm trying to use Mac spoofing for a Carp setup which is not working out well. Following here: https://forum.pfsense.org/index.php?topic=68137.0 and here http://lists.ovirt.org/pipermail/users/2013-October/017217.html This should be working by: engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.3 (The clusters are 3.3 compatible) In some strange way this is not working in any way. How can we solve this, as I'm out of options. Thanks! Matt ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Cannot Ping CARP/Spoofed address
On Mon, Apr 07, 2014 at 01:36:02AM +0200, Matt . wrote: Hi Guys, I'm trying to use Mac spoofing for a Carp setup which is not working out well. Following here: https://forum.pfsense.org/index.php?topic=68137.0 and here http://lists.ovirt.org/pipermail/users/2013-October/017217.html This should be working by: engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.3 (The clusters are 3.3 compatible) In some strange way this is not working in any way. How can we solve this, as I'm out of options. Could you attach vdsm.log from vmCraete of the relevant VM down to the domxml passed to libvirt? Please note that it is possible to enable mac spoofing not in the global system level, but rather on a specific vNIC of a specific VM. For this, you'd need to install vdsm-hook-macspoof, device a vNIC profile with ifacemacspoof=True custom property, and attach it to your specific VM. Dan. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Cannot Ping CARP/Spoofed address
Hi Dan, Thank you for your reply! I have installed that hook and removed it again because I was not sure. Following the mailinglist it looks like it's globally doable, so it's actually not ? I understand that but what would be the right steps than ? For an example when you have a vm with 4 nics ? Cheers, Matt 2014-04-07 3:12 GMT+02:00 Matt . yamakasi@gmail.com: Hi Dan, Thank you for your reply! I have installed that hook and removed it again because I was not sure. Following the mailinglist it looks like it's globally doable, so it's actually not ? I understand that but what would be the right steps than ? For an example when you have a vm with 4 nics ? Cheers, Matt 2014-04-07 2:00 GMT+02:00 Dan Kenigsberg dan...@redhat.com: On Mon, Apr 07, 2014 at 01:36:02AM +0200, Matt . wrote: Hi Guys, I'm trying to use Mac spoofing for a Carp setup which is not working out well. Following here: https://forum.pfsense.org/index.php?topic=68137.0 and here http://lists.ovirt.org/pipermail/users/2013-October/017217.html This should be working by: engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.3 (The clusters are 3.3 compatible) In some strange way this is not working in any way. How can we solve this, as I'm out of options. Could you attach vdsm.log from vmCraete of the relevant VM down to the domxml passed to libvirt? Please note that it is possible to enable mac spoofing not in the global system level, but rather on a specific vNIC of a specific VM. For this, you'd need to install vdsm-hook-macspoof, device a vNIC profile with ifacemacspoof=True custom property, and attach it to your specific VM. Dan. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Cannot Ping CARP/Spoofed address
HI, I managed it by using the commands on that hook page. It seems that you enable it for a whole VM indeed. Nice! Thanks for the clarification! Cheers, Matt 2014-04-07 4:07 GMT+02:00 Matt . yamakasi@gmail.com: Hi Dan, Thank you for your reply! I have installed that hook and removed it again because I was not sure. Following the mailinglist it looks like it's globally doable, so it's actually not ? I understand that but what would be the right steps than ? For an example when you have a vm with 4 nics ? Cheers, Matt 2014-04-07 2:00 GMT+02:00 Dan Kenigsberg dan...@redhat.com: On Mon, Apr 07, 2014 at 01:36:02AM +0200, Matt . wrote: Hi Guys, I'm trying to use Mac spoofing for a Carp setup which is not working out well. Following here: https://forum.pfsense.org/index.php?topic=68137.0 and here http://lists.ovirt.org/pipermail/users/2013-October/017217.html This should be working by: engine-config -s EnableMACAntiSpoofingFilterRules=false --cver=3.3 (The clusters are 3.3 compatible) In some strange way this is not working in any way. How can we solve this, as I'm out of options. Could you attach vdsm.log from vmCraete of the relevant VM down to the domxml passed to libvirt? Please note that it is possible to enable mac spoofing not in the global system level, but rather on a specific vNIC of a specific VM. For this, you'd need to install vdsm-hook-macspoof, device a vNIC profile with ifacemacspoof=True custom property, and attach it to your specific VM. Dan. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
