[openstack-dev] [Tap-as-a-Service] Problem in visualizing port-mirroring information
Anil Rao
anil.rao at gigamon.com
Wed Mar 1 22:41:37 UTC 2017
Hi Manik,
If the br-tap bridge is not present it is an indication that the TaaS Agent is not running. For a single-node setup, you will need to add both of the following lines:
enable_service taas
enable_service taas_openvswitch_agent
to the local.conf file.
You can follow the instructions in the DevStack section of the TaaS GIT repo.
Regards,
Anil
From: Manik Bindlish [mailto:Manik.Bindlish at nectechnologies.in]
Sent: Wednesday, March 01, 2017 2:58 AM
To: OpenStack Development Mailing List (not for usage questions); yamamoto at midokura.com
Subject: Re: [openstack-dev] [Tap-as-a-Service] Problem in visualizing port-mirroring information
Hi All,
I verified and found out that with my devstack setup ( on Master) , I could not see the br-tap ( as shown in the image attached) on my All-In-One deployment.
Please let me know if this is an issue, or is this expected. If it is expected, then how can we monitor the mirrored packets without br-tap on OVS.
Regards,
Manik
From: Manik Bindlish [mailto:Manik.Bindlish at nectechnologies.in]
Sent: Tuesday, February 28, 2017 5:07 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Problem in visualizing port-mirroring information
Hi,
> have you tried to disable port security?
I have disabled security group from both the ports. After disabling I am not able to ping on the instances.
===========================================================================
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+-----------------------+-------------------------------------------------------------------------------------------------------------+
| Field | Value |
+-----------------------+-------------------------------------------------------------------------------------------------------------+
| admin_state_up | True |
| allowed_address_pairs | |
| binding:host_id | openstack-nti-11 |
| binding:profile | {} |
| binding:vif_details | {"port_filter": true, "ovs_hybrid_plug": true} |
| binding:vif_type | ovs |
| binding:vnic_type | normal |
| created_at | 2017-02-27T10:13:51Z |
| description | |
| device_id | 1582911f-ed59-43d6-9711-0e505db5413b |
| device_owner | compute:None |
| extra_dhcp_opts | |
| fixed_ips | {"subnet_id": "398b77d2-49aa-4d29-ac4d-f0fd14943120", "ip_address": "10.0.0.12"} |
| | {"subnet_id": "401e3dde-1504-4620-8bbc-0ad6e54b0570", "ip_address": "fdaa:99df:2497:0:f816:3eff:fe58:4d36"} |
| id | dde6689e-4f0f-4fe2-9d28-1182ef03e113 |
| mac_address | fa:16:3e:58:4d:36 |
| name | |
| network_id | 7fae0053-aeeb-44ac-9336-41b9cae8a9ba |
| port_security_enabled | True |
| project_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6 |
| revision_number | 13 |
| security_groups | |
| status | ACTIVE |
| tags | |
| tenant_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6 |
| updated_at | 2017-02-28T11:17:52Z |
+-----------------------+-------------------------------------------------------------------------------------------------------------+
ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron port-show 19526048-98d9-4e6c-8205-dddfcaf8f2b2
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+-----------------------+-------------------------------------------------------------------------------------------------------------+
| Field | Value |
+-----------------------+-------------------------------------------------------------------------------------------------------------+
| admin_state_up | True |
| allowed_address_pairs | |
| binding:host_id | openstack-nti-11 |
| binding:profile | {} |
| binding:vif_details | {"port_filter": true, "ovs_hybrid_plug": true} |
| binding:vif_type | ovs |
| binding:vnic_type | normal |
| created_at | 2017-02-22T09:59:51Z |
| description | |
| device_id | 843fe80f-971a-43e3-986c-31d19bef3898 |
| device_owner | compute:None |
| extra_dhcp_opts | |
| fixed_ips | {"subnet_id": "398b77d2-49aa-4d29-ac4d-f0fd14943120", "ip_address": "10.0.0.3"} |
| | {"subnet_id": "401e3dde-1504-4620-8bbc-0ad6e54b0570", "ip_address": "fdaa:99df:2497:0:f816:3eff:feeb:52f2"} |
| id | 19526048-98d9-4e6c-8205-dddfcaf8f2b2 |
| mac_address | fa:16:3e:eb:52:f2 |
| name | |
| network_id | 7fae0053-aeeb-44ac-9336-41b9cae8a9ba |
| port_security_enabled | True |
| project_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6 |
| revision_number | 13 |
| security_groups | |
| status | ACTIVE |
| tags | |
| tenant_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6 |
| updated_at | 2017-02-28T11:16:11Z |
+-----------------------+-------------------------------------------------------------------------------------------------------------+
ubuntu at openstack-nti-11:/opt/stack/devstack$ sudo ip netns exec qdhcp-7fae0053-aeeb-44ac-9336-41b9cae8a9ba ping 192.168.200.250
PING 192.168.200.250 (192.168.200.250) 56(84) bytes of data.
================================
Thanks,
Manik
-----Original Message-----
From: Takashi Yamamoto [mailto:yamamoto at midokura.com]
Sent: Tuesday, February 28, 2017 3:35 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Problem in visualizing port-mirroring information
On Tue, Feb 28, 2017 at 4:05 PM, Manik Bindlish <Manik.Bindlish at nectechnologies.in<mailto:Manik.Bindlish at nectechnologies.in>> wrote:
> Hi All,
>
>
>
> I am facing an issue in visualizing port-mirroring information.
>
>
>
> 1.) Created 2 VMs:
>
> VM1: ubuntu3(10.0.0.3, floating IP: 192.168.200.252) – Tap service
> created
>
> VM2: ubuntu2(10.0.0.12, floating ip: 192.168.200.250) – Tap flow
> created
>
> 2.) Connected to bridge router: br-ex(192.168.200.11)
>
> 3.) Pinging google is possible and can be check from br-ex
>
>
>
> Problem: Not able to get the packet info on ubuntu3 where tap service
> is running.
>
>
>
> Ports info:
>
> ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron port-show
> 19526048-98d9-4e6c-8205-dddfcaf8f2b2
>
> neutron CLI is deprecated and will be removed in the future. Use
> openstack CLI instead.
>
> +-----------------------+-------------------------------------------------------------------------------------------------------------+
>
> | Field | Value
> |
>
> +-----------------------+-------------------------------------------------------------------------------------------------------------+
>
> | admin_state_up | True
> |
>
> | allowed_address_pairs |
> |
>
> | binding:host_id | openstack-nti-11
> |
>
> | binding:profile | {}
> |
>
> | binding:vif_details | {"port_filter": true, "ovs_hybrid_plug": true}
> |
>
> | binding:vif_type | ovs
> |
>
> | binding:vnic_type | normal
> |
>
> | created_at | 2017-02-22T09:59:51Z
> |
>
> | description |
> |
>
> | device_id | 843fe80f-971a-43e3-986c-31d19bef3898
> |
>
> | device_owner | compute:None
> |
>
> | extra_dhcp_opts |
> |
>
> | fixed_ips | {"subnet_id":
> "398b77d2-49aa-4d29-ac4d-f0fd14943120", "ip_address": "10.0.0.3"}
> |
>
> | | {"subnet_id":
> "401e3dde-1504-4620-8bbc-0ad6e54b0570", "ip_address":
> "fdaa:99df:2497:0:f816:3eff:feeb:52f2"} |
>
> | id | 19526048-98d9-4e6c-8205-dddfcaf8f2b2
> |
>
> | mac_address | fa:16:3e:eb:52:f2
> |
>
> | name |
> |
>
> | network_id | 7fae0053-aeeb-44ac-9336-41b9cae8a9ba
> |
>
> | port_security_enabled | True
have you tried to disable port security?
> |
>
> | project_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6
> |
>
> | revision_number | 10
> |
>
> | security_groups | 13e4320a-bc74-4303-a55d-67a0f092a066
> |
>
> | status | ACTIVE
> |
>
> | tags |
> |
>
> | tenant_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6
> |
>
> | updated_at | 2017-02-22T10:00:10Z
> |
>
> +-----------------------+-------------------------------------------------------------------------------------------------------------+
>
>
>
>
>
> ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron port-show
> dde6689e-4f0f-4fe2-9d28-1182ef03e113
>
> neutron CLI is deprecated and will be removed in the future. Use
> openstack CLI instead.
>
> +-----------------------+-------------------------------------------------------------------------------------------------------------+
>
> | Field | Value
> |
>
> +-----------------------+-------------------------------------------------------------------------------------------------------------+
>
> | admin_state_up | True
> |
>
> | allowed_address_pairs |
> |
>
> | binding:host_id | openstack-nti-11
> |
>
> | binding:profile | {}
> |
>
> | binding:vif_details | {"port_filter": true, "ovs_hybrid_plug": true}
> |
>
> | binding:vif_type | ovs
> |
>
> | binding:vnic_type | normal
> |
>
> | created_at | 2017-02-27T10:13:51Z
> |
>
> | description |
> |
>
> | device_id | 1582911f-ed59-43d6-9711-0e505db5413b
> |
>
> | device_owner | compute:None
> |
>
> | extra_dhcp_opts |
> |
>
> | fixed_ips | {"subnet_id":
> "398b77d2-49aa-4d29-ac4d-f0fd14943120", "ip_address": "10.0.0.12"}
> |
>
> | | {"subnet_id":
> "401e3dde-1504-4620-8bbc-0ad6e54b0570", "ip_address":
> "fdaa:99df:2497:0:f816:3eff:fe58:4d36"} |
>
> | id | dde6689e-4f0f-4fe2-9d28-1182ef03e113
> |
>
> | mac_address | fa:16:3e:58:4d:36
> |
>
> | name |
> |
>
> | network_id | 7fae0053-aeeb-44ac-9336-41b9cae8a9ba
> |
>
> | port_security_enabled | True
> |
>
> | project_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6
> |
>
> | revision_number | 10
> |
>
> | security_groups | 13e4320a-bc74-4303-a55d-67a0f092a066
> |
>
> | status | ACTIVE
> |
>
> | tags |
> |
>
> | tenant_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6
> |
>
> | updated_at | 2017-02-27T10:14:02Z
> |
>
> +-----------------------+-------------------------------------------------------------------------------------------------------------+
>
>
>
> Tap Service:
>
> ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron tap-service-show
> b7415d49-c0b0-4144-bac9-1a11bda713d9
>
> neutron CLI is deprecated and will be removed in the future. Use
> openstack CLI instead.
>
> +-------------+--------------------------------------+
>
> | Field | Value |
>
> +-------------+--------------------------------------+
>
> | description | |
>
> | id | b7415d49-c0b0-4144-bac9-1a11bda713d9 |
>
> | name | tapsrvc1 |
>
> | port_id | 19526048-98d9-4e6c-8205-dddfcaf8f2b2 |
>
> | project_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6 |
>
> | status | ACTIVE |
>
> | tenant_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6 |
>
> +-------------+--------------------------------------+
>
>
>
> Tap Flow:
>
> ubuntu at openstack-nti-11:/opt/stack/devstack$ neutron tap-flow-show
> 63c359fc-bb04-4581-831b-a041572574c6
>
> neutron CLI is deprecated and will be removed in the future. Use
> openstack CLI instead.
>
> +----------------+--------------------------------------+
>
> | Field | Value |
>
> +----------------+--------------------------------------+
>
> | description | |
>
> | direction | BOTH |
>
> | id | 63c359fc-bb04-4581-831b-a041572574c6 |
>
> | name | |
>
> | project_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6 |
>
> | source_port | dde6689e-4f0f-4fe2-9d28-1182ef03e113 |
>
> | status | ACTIVE |
>
> | tap_service_id | b7415d49-c0b0-4144-bac9-1a11bda713d9 |
>
> | tenant_id | 9c342a60b7cd4e8cacc8c5f6f92e80e6 |
>
> +----------------+--------------------------------------+
>
>
>
>
>
>
>
>
>
> Thanks,
>
> Manik
>
>
> ______________________________________________________________________
> ____ OpenStack Development Mailing List (not for usage questions)
> Unsubscribe:
> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<mailto:OpenStack-dev-request at lists.openstack.org?subject:unsubscribe>
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<mailto:OpenStack-dev-request at lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20170301/7d223d90/attachment.html>
More information about the OpenStack-dev
mailing list