[openstack-dev] [Neutron] Missing "allowed address pairs"?

Kevin Benton blak111 at gmail.com
Mon Jun 8 20:43:39 UTC 2015


It looks like security groups aren't enabled. Make sure you don't have a
config option setting 'enable_security_group' to False.

Check the startup log, you should see something like "Driver configuration
doesn't match with enable_security_group" and "Disabled
allowed-address-pairs extension."

On Mon, Jun 8, 2015 at 7:50 AM, Ken D'Ambrosio <ken at jots.org> wrote:

> You have better chances of getting an answer if you asked the -dev list
>> and add > [Neutron] to the subject (done here).
>>
>> That said, can you tell us a bit more about your deployment? You can also
>> hop
>> on #openstack-neutron on Freenode to look for neutron developers who can
>> help
>> you more interactively.
>>
>> Cheers,
>> Armando
>>
>
> Hi.  As per Armando's suggestion, e-mailing openstack-dev for advice, and
> have pasted files and command output, below.  Our Ubuntu-based Openstack
> installations do not seem to be enabling "allowed address pairs".  It seems
> that we (or Ubuntu) are disabling them somehow, and we were wondering if
> you might have advice on where to look.  If there's any additional
> information you need, please let us know.
>
> Thanks kindly,
>
> -Ken
>
> -------------------- files and output below ------------------------
>
>
> ubuntu at magnificent-hill:~$ neutron ext-list
> +-----------------------+-----------------------------------------------+
> | alias                 | name                                          |
> +-----------------------+-----------------------------------------------+
> | service-type          | Neutron Service Type Management               |
> | ext-gw-mode           | Neutron L3 Configurable external gateway mode |
> | l3_agent_scheduler    | L3 Agent Scheduler                            |
> | lbaas_agent_scheduler | Loadbalancer Agent Scheduler                  |
> | external-net          | Neutron external network                      |
> | binding               | Port Binding                                  |
> | metering              | Neutron Metering                              |
> | agent                 | agent                                         |
> | quotas                | Quota management support                      |
> | dhcp_agent_scheduler  | DHCP Agent Scheduler                          |
> | multi-provider        | Multi Provider Network                        |
> | fwaas                 | Firewall service                              |
> | router                | Neutron L3 Router                             |
> | vpnaas                | VPN service                                   |
> | extra_dhcp_opt        | Neutron Extra DHCP opts                       |
> | provider              | Provider Network                              |
> | lbaas                 | LoadBalancing service                         |
> | extraroute            | Neutron Extra Route                           |
> +-----------------------+-----------------------------------------------+
>
>
> neutron.conf:
> ##################################################################
> # [ WARNING ]
> # Configuration file maintained by Juju. Local changes may be overwritten.
> ##################################################################
> [DEFAULT]
> verbose = False
> debug = False
> lock_path = /var/lock/neutron
> core_plugin = neutron.plugins.ml2.plugin.Ml2Plugin
> rabbit_userid = neutron
> rabbit_virtual_host = openstack
> rabbit_password = myhashhere
> rabbit_host = 10.10.3.6
> control_exchange = neutron
> notification_driver = neutron.openstack.common.notifier.list_notifier
> list_notifier_drivers = neutron.openstack.common.notifier.rabbit_notifier
> [agent]
> root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf
> ------------ end neutron.conf ---------------
>
> ml2_conf.ini:
>
> ###############################################################################
> # [ WARNING ]
> # Configuration file maintained by Juju. Local changes may be overwritten.
>
> ###############################################################################
> [ml2]
> type_drivers = gre,vxlan,vlan,flat
> tenant_network_types = gre,vxlan,vlan,flat
> mechanism_drivers = openvswitch,l2population
>
> [ml2_type_gre]
> tunnel_id_ranges = 1:1000
>
> [ml2_type_vxlan]
> vni_ranges = 1001:2000
>
> [ml2_type_vlan]
> network_vlan_ranges = physnet1:1000:2000
>
> [ml2_type_flat]
> flat_networks =
>
> [ovs]
> enable_tunneling = True
> local_ip = 10.10.3.8
> bridge_mappings = physnet1:br-data
>
> [agent]
> tunnel_types = gre
> l2_population = False
>
>
> [securitygroup]
> firewall_driver =
> neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
> ------------ end ml2_conf.ini ---------------
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



-- 
Kevin Benton
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150608/9a5e63a2/attachment.html>


More information about the OpenStack-dev mailing list