[openstack-dev] [heat][neutron] allowed_address_pairs does not work

Salvatore Orlando sorlando at nicira.com
Tue Mar 3 17:27:15 UTC 2015


While it is entirely possible that the feature is broken, it seems that in
this case you're expecting the allowed_address_pairs to populate fixed_ips.
Neutron does many crazy and unreasonable things but asking you to pass an
attribute in the request to populate another attribute is not one of these!

Basically allowed address pairs are MAC/IP pairs for which you allow
traffic on a port, but that are not managed by neutron. This means that, in
your case, if you defined an additional IP address and set it to 192.168.0.58
in your instance, Neutron would allow traffic from or to that address. If
you did not explicitly add that address in allowed_address_pairs neutron
would block traffic to and from it.
>From the CLI, you should be able to see allowed address pairs configured on
a port with neutron port-show

If you wanted to configure 192.168.0.58 as your port's IP address and let
neutron manage it, you should be able to use the fixed_ips
attribute, although I don't know how to leverage that through Heat
templates.

Salvatore

On 3 March 2015 at 15:41, Jay Lau <jay.lau.513 at gmail.com> wrote:

>
> Hi,
>
> I see that the neutron port resource has a property named as
> allowed_address_pairs and I tried to use this property to create a port,
> but seems it does not working.
>
> I want to create a port with mac as fa:16:3e:05:d5:9f and ip as
> 192.168.0.58, but after create with a heat template, the final neutron port
> mac is fa:16:3e:01:45:bb and ip is 192.168.0.62, can someone show me where
> is wrong in my configuration?
>
> Also allowed_address_pairs is a list, does it means that I can create a
> port with multiple mac and ip address, if this is the case, then when
> create a VM with this port, does it mean that the VM can have multiple
> mac&ip?
>
> [root at prsdemo2 ~]# cat port-3.yaml
> heat_template_version: 2013-05-23
>
> description: >
>   HOT template to create a new neutron network plus a router to the public
>   network, and for deploying two servers into the new network. The
> template also
>   assigns floating IP addresses to each server so they are routable from
> the
>   public network.
>
> resources:
>
>   server1_port:
>     type: OS::Neutron::Port
>     properties:
>       allowed_address_pairs:
>         - mac_address: "fa:16:3e:05:d5:9f"
>           ip_address: "192.168.0.58"
>       network: "demonet"
> [root at prsdemo2 ~]# heat stack-create -f ./port-3.yaml p3
>
> +--------------------------------------+------------+--------------------+----------------------+
> | id                                   | stack_name | stack_status       |
> creation_time        |
>
> +--------------------------------------+------------+--------------------+----------------------+
> | 234d512c-4c90-4d4e-8d1c-ccf272254477 | p3         | CREATE_IN_PROGRESS |
> 2015-03-03T14:35:49Z |
>
> +--------------------------------------+------------+--------------------+----------------------+
> [root at prsdemo2 ~]# heat stack-list
>
> +--------------------------------------+------------+-----------------+----------------------+
> | id                                   | stack_name | stack_status    |
> creation_time        |
>
> +--------------------------------------+------------+-----------------+----------------------+
> | 234d512c-4c90-4d4e-8d1c-ccf272254477 | p3         | CREATE_COMPLETE |
> 2015-03-03T14:35:49Z |
>
> +--------------------------------------+------------+-----------------+----------------------+
> [root at prsdemo2 ~]# neutron port-list
>
> +--------------------------------------+------------------------------------------+-------------------+-------------------------------------------------------------------------------------+
> | id                                   |
> name                                     | mac_address       |
> fixed_ips
> |
>
> +--------------------------------------+------------------------------------------+-------------------+-------------------------------------------------------------------------------------+
> | 8d20b3a4-024a-4613-9d26-3d49534a839c |
> p3-server1_port-op3w5yzyks5i             | fa:16:3e:01:45:bb |
> {"subnet_id": "4e7b6983-7364-4a71-8d9c-580d88fd4797", "ip_address":
> "192.168.0.62"} |
>
> +--------------------------------------+------------------------------------------+-------------------+-------------------------------------------------------------------------------------+
>
> --
> Thanks,
>
> Jay Lau (Guangya Liu)
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150303/cf74573d/attachment.html>


More information about the OpenStack-dev mailing list