Hello Manu
What you observe should not be happenning.
> cookie=0xba5eba1100000205, duration=13.567s, table=87,
> priority=660,dl_type=0x894f,nsh_mdtype=1,nsh_spi=0xc,nsh_si=253,nsh_c
> 1=
> 0xc0a83865 actions=move:NXOXM_NSH_C1[]-
> >NXM_NX_TUN_IPV4_DST[],move:NXOXM_NSH_C2[]-
> >NXM_NX_TUN_ID[0..31],decap(),decap(),resubmit(,36)
This flow shouldnt be matching, moreover if on p7 you observe the same
mac as in p4. The flow that does that follows this template:
cookie=0xba5eba1100000203, table=87,
priority=680,eth_type=0x894f,regX[8..31]={nsp},regX[0..7]={nsi},
nsh_mdtype=1,nshc1=0
actions=decap(),decap(),set_field:{sf_mac}->eth_src,resubmit(,17)
Note that 'set_field:{sf_mac}->eth_src' is the action that sets the SF
mac address on las SFF egress.
In any case, that flow should also not be matching if you are using
neutron flow classifier.
The final flow that should be matching follows this template
cookie=0xba5eba1100000207, table=87,
priority=680,eth_type=0x894f,regX[8..31]={nsp},regX[0..7]={nsi},
nsh_mdtype=1,nshc1={local_ip},nshc2=0
actions=resubmit(,36)
I guess you are using a single node devstack setup. Can you provide the
full set of dumped flows for that node after running traffic?
BR
Jaime.
-----Original Message-----
From: Manu B <[email protected]>
To: [email protected] <[email protected]>, jc
[email protected]
Subject: [sfc-dev] SFC issue with Devtack setup
Date: Wed, 30 Jan 2019 11:32:23 +0000
Hi All,
While using the below service chain, the packets reaching port7 has the
same MAC address as port4.
[ODL – master, Devstack – pike, OVS – 2.10.1, Configuration – end of
mail]
In the last SFF, packets are reaching the below table 87 and
resubmitted to 36.
It is then forwarded to table 51 and reaches destination port p7.
But the destination MAC of packets reaching port 7 is the MAC of port
p4.
cookie=0xba5eba1100000205, duration=13.567s, table=87,
priority=660,dl_type=0x894f,nsh_mdtype=1,nsh_spi=0xc,nsh_si=253,nsh_c1=
0xc0a83865 actions=move:NXOXM_NSH_C1[]-
>NXM_NX_TUN_IPV4_DST[],move:NXOXM_NSH_C2[]-
>NXM_NX_TUN_ID[0..31],decap(),decap(),resubmit(,36)
cookie=0x900138a, duration=654.600s, table=36, priority=5,tun_id=0xe
actions=write_metadata:0x138a000000/0xfffffffff000000,goto_table:51
The below config is used
#Flow classifier config
neutron flow-classifier-create --description "HTTP traffic from
20.0.0.7 to 20.0.0.4" --ethertype IPv4 --source-ip-prefix 20.0.0.7/32
--destination-ip-prefix 20.0.0.4/32 --protocol tcp --source-port
1000:1000 --destination-port 80:80 --logical-source-port p1 FC1
20.0.0.4 is located in port p7
#Service chain config
neutron port-pair-create --description "Firewall SF instance 1" --
ingress p2 --egress p3 PP1
neutron port-pair-create --description "Firewall SF instance 2" --
ingress p4 --egress p5 PP2
neutron port-pair-group-create --port-pair PP1 PPG1
neutron port-pair-group-create --port-pair PP2 PPG2
neutron port-chain-create --port-pair-group PPG1 --port-pair-group PPG2
--flow-classifier FC1 PC1
Please help in resolving the issue.
Thanks,
Manu
_______________________________________________
sfc-dev mailing list
[email protected]
https://lists.opendaylight.org/mailman/listinfo/sfc-dev
_______________________________________________
sfc-dev mailing list
[email protected]
https://lists.opendaylight.org/mailman/listinfo/sfc-dev
