Reviewed: https://review.openstack.org/300542 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=0f9ec7b72a8ca173b760f20323f90bffefa91681 Submitter: Jenkins Branch: master
commit 0f9ec7b72a8ca173b760f20323f90bffefa91681 Author: Jakub Libosvar <[email protected]> Date: Fri Apr 1 14:53:03 2016 +0000 ovsfw: Remove vlan tag before injecting packets to port Open vSwitch takes care of vlan tagging in case normal switching is used. When ingress traffic packets are accepted, the actions=output:<port_number> is used but we need to explicitly take care of stripping out the vlan tags. Closes-Bug: 1564947 Change-Id: If3fc44c9fd1ac0f7bc9dfe9dc48e76352e981f8e ** Changed in: neutron Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1564947 Title: ovs-firewall doesn't work with tunneling and vlan tagging Status in neutron: Fix Released Bug description: As firewall uses actions=output: which doesn't handle vlan tags, accepted ingress traffic gets packets that are still tagged. Normal actions take care of vlan tags according tags on ports, so those are fine. We should use strip_vlan for all actions using output:<port_number> To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1564947/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
