[TripleO] how to make that inspection IP is given only to known hosts
Ruslanas Gžibovskis
ruslanas at lpic.lt
Tue Dec 8 06:53:53 UTC 2020
yeah, same here, I would like to have a dedicated network :) but (as now
popular to say) #reallife :D
Thank you. Will take a look at the upgrade.
On Tue, 8 Dec 2020 at 03:32, Harald Jensas <hjensas at redhat.com> wrote:
> On 12/7/20 8:27 PM, Oliver Walsh wrote:
> > Hi,
> >
> > The provisioning network needs to be isolated, typically by using VLANs
> > on the switch:
> >
> https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/environments/baremetal.html#networking
> > <
> https://docs.openstack.org/project-deploy-guide/tripleo-docs/latest/environments/baremetal.html#networking
> >
> >
> > In general, you can only have one DHCP server on an L2 network (ignoring
> > high-availability DHCP setups).
> >
> > Thanks,
> > Ollie
> >
>
> I fully agree with Ollie here, you should have the provisioning leg of
> the undercloud on a isolated VLAN.
>
> However, if you cant get an isolated network segment, and are on
> Victoria release ironic inspector has a new option that can be used to
> make the inspector DHCP server only answer requests from known MAC
> addresses, see:
> https://review.opendev.org/c/openstack/ironic-inspector/+/753435
>
>
> //
> Harald
>
> >
> > On Fri, 4 Dec 2020 at 19:34, Ruslanas Gžibovskis <ruslanas at lpic.lt
> > <mailto:ruslanas at lpic.lt>> wrote:
> >
> > Hi all,
> >
> > I have a situation, when in my network, I have loads of equipment,
> > which I do not control. and Inspection range gets occupied quite
> fast.
> >
> > and in TCP dump I get such messages:
> > DHCP-Message Option 53, length 1: NACK
> > Server-ID Option 54, length 4: DHCPD-IP
> > MSG Option 56, length 21: "address not available"
> >
> > I have disabled: enabled_node_discovery = false
> >
> > Anything else?
> >
> > maybe additional environment options for undercloud I could provide?
> >
> > Than kyou in advance, have a good $day_time
> > --
> > Ruslanas Gžibovskis
> > +370 6030 7030
> >
>
>
>
--
Ruslanas Gžibovskis
+370 6030 7030
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20201208/23d5b5ec/attachment.html>
More information about the openstack-discuss
mailing list