ACL is not programmed in agent, for multi-services-chain
Bug #1540444 reported by
Sunil Basker
This bug affects 2 people
| Affects | Status | Importance | Assigned to | Milestone | ||
|---|---|---|---|---|---|---|
| Juniper Openstack | Status tracked in Trunk | |||||
| Trunk |
Fix Committed
|
Critical
|
Sachin Bansal | |||
Bug Description
ACL is not getting propagated/
steps:
-> create left-vn & right-vn, set "multi services" checkbox
-> create two in-network/firewall SI, icmp-svc & other-svc
-> define policy to carry icmp traffic and tcp traffic through icmp-svc and other-svc respectively. Attach policy to both the VN.
-> generate ping traffic
Traffic is not directed through icmp-svc.
VRFs and appropriate routes are seen in agent introspect, but doesn't show any ACL or ACL doesn't point to appropriate VRF.
setup:
nodea30 & nodea31
Revision history for this message
| OpenContrail Admin (ci-admin-f) wrote [Review update] master | #1 |
Revision history for this message
| OpenContrail Admin (ci-admin-f) wrote A change has been merged | #3 |
| information type: | Proprietary → Public |
To post a comment you must log in.
Review in progress for https:/
Submitter: Sachin Bansal (<email address hidden>)