<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    AFAIK yes, your OpenStack setup would work fine. <br>
    But the Security Group (including anti-spoofing) rules will not have
    any effect to the traffic that is generated by the VMs.<br>
    <br>
    <div class="moz-cite-prefix">On 08/13/2015 04:49 PM, FASEELA.ASHRAF
      wrote:<br>
    </div>
    <blockquote
cite="mid:CAMLVTo+P-SZw1YjO5GmK_uKdXoHvdnmmivhznj_0rYHZTZtgtA@mail.gmail.com"
      type="cite">
      <div dir="ltr">Is it necessary only for implementing security
        group policy? Even if I don't set this, the open stack
        installation and a fully functional openstack environment should
        work, isn't it?<br>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Thu, Aug 13, 2015 at 2:01 PM,
          Sridhar Gaddam <span dir="ltr"><<a moz-do-not-send="true"
              href="mailto:sgaddam@redhat.com" target="_blank">sgaddam@redhat.com</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div text="#000000" bgcolor="#FFFFFF"> Neutron implements
              Security Groups by applying iptable rules on Linux bridge.
              So, we need these parameters to be set.<br>
              Please see [1] for details.<br>
              [1] - <a moz-do-not-send="true"
                href="https://bugs.launchpad.net/openstack-manuals/+bug/1359691"
                target="_blank">https://bugs.launchpad.net/openstack-manuals/+bug/1359691</a>
              <div>
                <div class="h5"><br>
                  <br>
                  On 08/13/2015 01:50 PM, FASEELA.ASHRAF wrote:<br>
                  <blockquote type="cite">
                    <div dir="ltr">I installed the package bridge-utils
                      and the error remains the same. In other versions
                      of Openstack like Juno and kilo these lines:<br>
                       <br>
                      <div>
                        <div class="gmail_extra">net.bridge.bridge-nf-call-arptables=1<br>
                          net.bridge.bridge-nf-call-iptables=1<br>
                           net.bridge.bridge-nf-call-ip6tables=1<br>
                          <br>
                        </div>
                        <div class="gmail_extra">are not used in the
                          sysctl file. So are they mandatory ?<br>
                          <br>
                          <br>
                          <br>
                        </div>
                        <div class="gmail_extra">
                          <div class="gmail_quote">On Thu, Aug 13, 2015
                            at 1:21 PM, Andreas Scheuring <span
                              dir="ltr"><<a moz-do-not-send="true"
                                href="mailto:scheuran@linux.vnet.ibm.com"
                                target="_blank">scheuran@linux.vnet.ibm.com</a>></span>
                            wrote:<br>
                            <blockquote class="gmail_quote"
                              style="margin:0 0 0 .8ex;border-left:1px
                              #ccc solid;padding-left:1ex">Can you try
                              the package bridge-utils?<br>
                              <div>
                                <div><br>
                                  On Do, 2015-08-13 at 11:15 +0530,
                                  FASEELA.ASHRAF wrote:<br>
                                  > Hi ,<br>
                                  ><br>
                                  > I am trying to install a 3 node
                                  architecture of Openstack icehouse<br>
                                  > version on my Ubuntu 14.04LTS . I
                                  would like to know if it is<br>
                                  > necessary to add the following
                                  lines to sysctl.conf in network node.<br>
                                  >
                                  net.bridge.bridge-nf-call-arptables=1<br>
                                  >
                                  net.bridge.bridge-nf-call-iptables=1<br>
                                  >
                                  net.bridge.bridge-nf-call-ip6tables=1<br>
                                  ><br>
                                  > When running the command sysctl
                                  -p following errors are shown :<br>
                                  > sysctl: cannot stat
                                  /proc/sys/net/bridge/bridge-nf-call-arptables:
                                  No such file or directory<br>
                                  > sysctl: cannot stat
                                  /proc/sys/net/bridge/bridge-nf-call-iptables:
                                  No such file or directory<br>
                                  > sysctl: cannot stat
                                  /proc/sys/net/bridge/bridge-nf-call-ip6tables:
                                  No such file or directory<br>
                                  ><br>
                                  > Am I missing some package in my
                                  system?<br>
                                  ><br>
                                  ><br>
                                  ><br>
                                </div>
                              </div>
                              >
                              _______________________________________________<br>
                              > Mailing list: <a
                                moz-do-not-send="true"
                                href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                                rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                              > Post to     : <a
                                moz-do-not-send="true"
                                href="mailto:openstack@lists.openstack.org"
                                target="_blank">openstack@lists.openstack.org</a><br>
                              > Unsubscribe : <a
                                moz-do-not-send="true"
                                href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack"
                                rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
                              <span><font color="#888888"><br>
                                  --<br>
                                  Andreas<br>
                                  (IRC: scheuran)<br>
                                  <br>
                                  <br>
                                </font></span></blockquote>
                          </div>
                          <br>
                        </div>
                      </div>
                    </div>
                    <br>
                    <fieldset></fieldset>
                    <br>
                    <pre>_______________________________________________
Mailing list: <a moz-do-not-send="true" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
Post to     : <a moz-do-not-send="true" href="mailto:openstack@lists.openstack.org" target="_blank">openstack@lists.openstack.org</a>
Unsubscribe : <a moz-do-not-send="true" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a>
</pre>
                  </blockquote>
                  <br>
                </div>
              </div>
            </div>
          </blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <br>
  </body>
</html>