Fabric config push fails in the case of security group when QFX-10k is a leaf.

Bug #1801468 reported by Sai Chakravarthy Alikapati
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R5.0
Won't Fix
Critical
Ankur Tandon
Trunk
New
Critical
Ankur Tandon

Bug Description

Fabric config push fails when QFX-10k is a leaf connecting a bms.

TASK [commit_fabric_config : juniper_junos_config] *****************************
11/02/2018 19:14:27.584 [ansible] pid=3060 [ERROR]: fatal: [localhost]: FAILED! => {"changed": false, "msg": "Failure checking the configuraton: CommitError(edit_path: [edit groups __contrail_overlay_security_group__ firewall family ethernet-switching], bad_element: filter sg-filter-sg2-0e3120d2-a782-4068-8eae-7edb223957bf, message: error: QFX10K L2 filter f1 doesn't support mixed L2 and L3/L4 match conditions\nerror: commit-check failed\nerror: Configuration flexible-vlan-tagging is not supported with ifl family ethernet-switching\nerror: configuration check-out failed)"}

Revision history for this message
manishkn (manishkn) wrote :

incase this move to 5.1, we should not miss to release-note it

tags: added: releasenote
Revision history for this message
Jeba Paulaiyan (jebap) wrote :

Notes:

Security group configuration does not work on Leaf ports if QFX10K is configured as Leaf device.

Jeba Paulaiyan (jebap)
information type: Proprietary → Public
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.