Public bug reported: 1. create security-group anquanzu01, anquanzu02 2. create vm1 with anquanzu01, anquanzu02, create vm2 with anquanzu02. 3. vm1 can ping vm2 well, but vm2 can not ping vm1.
anquanzu01, anquanzu02 are as follows：
[root@172e18e211e96 ~]# neutron security-group-show anquanzu01
neutron CLI is deprecated and will be removed in the future. Use openstack CLI
instead.
+----------------------+--------------------------------------------------------------------+
| Field | Value
|
+----------------------+--------------------------------------------------------------------+
| created_at | 2017-10-19T04:14:01Z
|
| description |
|
| id | b089348a-f939-43f8-bdd2-d7b54376f640
|
| name | anquanzu01
|
| project_id | 2acab64182334292a9bf5f3cdd5b3428
|
| revision_number | 6
|
| security_group_rules | {
|
| | "remote_group_id": null,
|
| | "direction": "ingress",
|
| | "protocol": "icmp",
|
| | "description": "",
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": "0.0.0.0/0",
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:26:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "created_at": "2017-10-19T04:26:01Z",
|
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "id": "1b7a4a06-e762-487a-9776-0d9d781f537c"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "egress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv6",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "created_at": "2017-10-19T04:14:01Z",
|
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "id": "2e605e9b-9be1-4dd3-a86b-af7b95c476fb"
|
| | }
|
| | {
|
| | "remote_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "direction": "ingress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv6",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "created_at": "2017-10-19T04:14:01Z",
|
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "id": "bad26fd6-448d-4baa-9ca5-b7127a391f6b"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "ingress",
|
| | "protocol": "tcp",
|
| | "description": "",
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": "0.0.0.0/0",
|
| | "port_range_max": 22,
|
| | "updated_at": "2017-10-19T04:25:42Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": 22,
|
| | "revision_number": 0,
|
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "created_at": "2017-10-19T04:25:42Z",
|
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "id": "e8d75ea6-6e36-4e4d-b146-3137c895f5df"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "egress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "created_at": "2017-10-19T04:14:01Z",
|
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "id": "ed1c2666-d9e8-4579-a123-d11a02f4f909"
|
| | }
|
| | {
|
| | "remote_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "direction": "ingress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "created_at": "2017-10-19T04:14:01Z",
|
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "id": "f37db2db-cd9d-4e8b-9671-3f839053a7bd"
|
| | }
|
| tags |
|
| tenant_id | 2acab64182334292a9bf5f3cdd5b3428
|
| updated_at | 2017-10-19T04:26:01Z
|
+----------------------+--------------------------------------------------------------------+
[root@172e18e211e96 ~]# neutron security-group-show anquanzu02
neutron CLI is deprecated and will be removed in the future. Use openstack CLI
instead.
+----------------------+--------------------------------------------------------------------+
| Field | Value
|
+----------------------+--------------------------------------------------------------------+
| created_at | 2017-10-19T04:14:11Z
|
| description |
|
| id | 20633d95-15e0-43e2-90e1-5e66a50619c2
|
| name | anquanzu02
|
| project_id | 2acab64182334292a9bf5f3cdd5b3428
|
| revision_number | 41
|
| security_group_rules | {
|
| | "remote_group_id": null,
|
| | "direction": "ingress",
|
| | "protocol": null,
|
| | "description": "",
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": "0.0.0.0/0",
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-20T06:26:09Z",
|
| | "security_group_id":
"20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "created_at": "2017-10-20T06:26:09Z",
|
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "id": "0dbcf71d-b90a-452c-a641-d9923db2364a"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "egress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv6",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:11Z",
|
| | "security_group_id":
"20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "created_at": "2017-10-19T04:14:11Z",
|
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "id": "2bbec5d3-301c-4b9b-ae96-de39749ce0f3"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "egress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:11Z",
|
| | "security_group_id":
"20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "created_at": "2017-10-19T04:14:11Z",
|
| | "project_id": "2acab64182334292a9bf5f3cdd5b3428",
|
| | "id": "d2b63e09-b3ec-41b6-a300-41cdc2ab4737"
|
| | }
|
| tags |
|
| tenant_id | 2acab64182334292a9bf5f3cdd5b3428
|
| updated_at | 2017-10-20T06:26:09Z
|
+----------------------+--------------------------------------------------------------------+
** Affects: neutron
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1728479
Title:
some security-group rules will be covered.
Status in neutron:
New
Bug description:
1. create security-group anquanzu01, anquanzu02
2. create vm1 with anquanzu01, anquanzu02, create vm2 with anquanzu02.
3. vm1 can ping vm2 well, but vm2 can not ping vm1.
anquanzu01, anquanzu02 are as follows：
[root@172e18e211e96 ~]# neutron security-group-show anquanzu01
neutron CLI is deprecated and will be removed in the future. Use openstack
CLI instead.
+----------------------+--------------------------------------------------------------------+
| Field | Value
|
+----------------------+--------------------------------------------------------------------+
| created_at | 2017-10-19T04:14:01Z
|
| description |
|
| id | b089348a-f939-43f8-bdd2-d7b54376f640
|
| name | anquanzu01
|
| project_id | 2acab64182334292a9bf5f3cdd5b3428
|
| revision_number | 6
|
| security_group_rules | {
|
| | "remote_group_id": null,
|
| | "direction": "ingress",
|
| | "protocol": "icmp",
|
| | "description": "",
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": "0.0.0.0/0",
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:26:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:26:01Z",
|
| | "project_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "1b7a4a06-e762-487a-9776-0d9d781f537c"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "egress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv6",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z",
|
| | "project_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "2e605e9b-9be1-4dd3-a86b-af7b95c476fb"
|
| | }
|
| | {
|
| | "remote_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "direction": "ingress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv6",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z",
|
| | "project_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "bad26fd6-448d-4baa-9ca5-b7127a391f6b"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "ingress",
|
| | "protocol": "tcp",
|
| | "description": "",
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": "0.0.0.0/0",
|
| | "port_range_max": 22,
|
| | "updated_at": "2017-10-19T04:25:42Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": 22,
|
| | "revision_number": 0,
|
| | "tenant_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:25:42Z",
|
| | "project_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "e8d75ea6-6e36-4e4d-b146-3137c895f5df"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "egress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z",
|
| | "project_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "ed1c2666-d9e8-4579-a123-d11a02f4f909"
|
| | }
|
| | {
|
| | "remote_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "direction": "ingress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:01Z",
|
| | "security_group_id":
"b089348a-f939-43f8-bdd2-d7b54376f640", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:01Z",
|
| | "project_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "f37db2db-cd9d-4e8b-9671-3f839053a7bd"
|
| | }
|
| tags |
|
| tenant_id | 2acab64182334292a9bf5f3cdd5b3428
|
| updated_at | 2017-10-19T04:26:01Z
|
+----------------------+--------------------------------------------------------------------+
[root@172e18e211e96 ~]# neutron security-group-show anquanzu02
neutron CLI is deprecated and will be removed in the future. Use openstack
CLI instead.
+----------------------+--------------------------------------------------------------------+
| Field | Value
|
+----------------------+--------------------------------------------------------------------+
| created_at | 2017-10-19T04:14:11Z
|
| description |
|
| id | 20633d95-15e0-43e2-90e1-5e66a50619c2
|
| name | anquanzu02
|
| project_id | 2acab64182334292a9bf5f3cdd5b3428
|
| revision_number | 41
|
| security_group_rules | {
|
| | "remote_group_id": null,
|
| | "direction": "ingress",
|
| | "protocol": null,
|
| | "description": "",
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": "0.0.0.0/0",
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-20T06:26:09Z",
|
| | "security_group_id":
"20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-20T06:26:09Z",
|
| | "project_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "0dbcf71d-b90a-452c-a641-d9923db2364a"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "egress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv6",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:11Z",
|
| | "security_group_id":
"20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:11Z",
|
| | "project_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "2bbec5d3-301c-4b9b-ae96-de39749ce0f3"
|
| | }
|
| | {
|
| | "remote_group_id": null,
|
| | "direction": "egress",
|
| | "protocol": null,
|
| | "description": null,
|
| | "tags": [],
|
| | "ethertype": "IPv4",
|
| | "remote_ip_prefix": null,
|
| | "port_range_max": null,
|
| | "updated_at": "2017-10-19T04:14:11Z",
|
| | "security_group_id":
"20633d95-15e0-43e2-90e1-5e66a50619c2", |
| | "port_range_min": null,
|
| | "revision_number": 0,
|
| | "tenant_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "created_at": "2017-10-19T04:14:11Z",
|
| | "project_id":
"2acab64182334292a9bf5f3cdd5b3428", |
| | "id": "d2b63e09-b3ec-41b6-a300-41cdc2ab4737"
|
| | }
|
| tags |
|
| tenant_id | 2acab64182334292a9bf5f3cdd5b3428
|
| updated_at | 2017-10-20T06:26:09Z
|
+----------------------+--------------------------------------------------------------------+
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1728479/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
