[Openstack] Site to Site VPN in openstack

2016-09-19 Thread Jaison Peter
Hello all, I was checking if anything prevents us from establishing a site to site VPN from openstack private cloud to a on site hardware device like Cisco ASA. I knew that its possible to setup a site to site VPN between two openstack clouds using VPNaaS, but I am not sure about openstack to ha

Re: [Openstack] [openstack][neutron][VMware] Do we have an option to select the port group from vcenter server?

2016-09-19 Thread Vaidyanath Manogaran
I am using Mitaka. On Tue, Sep 20, 2016 at 11:06 AM, Gary Kotton wrote: > Are you using the latest master upstream? > > > > *From: *Vaidyanath Manogaran > *Date: *Tuesday, September 20, 2016 at 7:23 AM > *To: *Gary Kotton > *Cc: *"commun...@lists.openstack.org" , " > openstack@lists.openstack.

Re: [Openstack] [openstack][neutron][VMware] Do we have an option to select the port group from vcenter server?

2016-09-19 Thread Gary Kotton
That code is currently not in MItaka. It was only added in Newton. Thanks Gary From: Vaidyanath Manogaran Date: Tuesday, September 20, 2016 at 8:57 AM To: Gary Kotton Cc: "commun...@lists.openstack.org" , "openstack@lists.openstack.org" Subject: Re: [Openstack] [openstack][neutron][VMware] Do

Re: [Openstack] [OpenStack] [keystone] How to make keystone highly available?

2016-09-19 Thread Van Leeuwen, Robert
> > Hello, > > I am thinking about using the keystone as an authentication system but I am > afraid about failures which can affect all the cluster. In fact if the > keystone server dies then our full cluster will stop. It would be better if > we could use HA with the keystone. Then if > our pri

Re: [Openstack] [openstack][neutron][VMware] Do we have an option to select the port group from vcenter server?

2016-09-19 Thread Gary Kotton
Are you using the latest master upstream? From: Vaidyanath Manogaran Date: Tuesday, September 20, 2016 at 7:23 AM To: Gary Kotton Cc: "commun...@lists.openstack.org" , "openstack@lists.openstack.org" Subject: Re: [Openstack] [openstack][neutron][VMware] Do we have an option to select the port

Re: [Openstack] [openstack][neutron][VMware] Do we have an option to select the port group from vcenter server?

2016-09-19 Thread Vaidyanath Manogaran
I am unable to find the network type portgroup. root@controller:~# neutron net-create netvlan-14 --provider:network_type portgroup --provider:physical_network 'dvPG-PT1(192.168.14.x)' Invalid input for operation: provider:network_type portgroup not supported. Neutron server returns request_ids: ['

Re: [Openstack] [OpenStack] [keystone] How to make keystone highly available?

2016-09-19 Thread Clint Byrum
Excerpts from Alexandr Porunov's message of 2016-09-19 21:46:54 +0300: > Hello, > > I am thinking about using the keystone as an authentication system but I am > afraid about failures which can affect all the cluster. In fact if the > keystone server dies then our full cluster will stop. It would

Re: [Openstack] [OpenStack] [keystone] How to make keystone highly available?

2016-09-19 Thread John van Ommen
If you'd like to avoid the pain of configuring this manually, Helion OpenStack has many HA features enabled by default: http://docs.hpcloud.com/#3.x/helion/planning/high_availability.html On Mon, Sep 19, 2016 at 2:10 PM, Alexandr Porunov wrote: > Thank you for pointing on it. I haven't yet use p

[Openstack] cisco trunk interface in err-disabled

2016-09-19 Thread Satish Patel
We have openstack mikata running and its trunk with cisco 2960 switch and following configuration i have on switch side ! interface GigabitEthernet1/0/1 description compute-1 switchport trunk allowed vlan 10,20 switchport mode trunk spanning-tree guard root end why cisco trunk interface put

Re: [Openstack] [OpenStack] [keystone] How to make keystone highly available?

2016-09-19 Thread Alexandr Porunov
Thank you for pointing on it. I haven't yet use pacemaker but I will try to configure it. Sincerely, Alexandr On Mon, Sep 19, 2016 at 10:23 PM, Remo Mattei wrote: > There is already ha options with pacemaker and corosync. Have you looked > at that? > > Inviato da iPhone > > Il giorno 19 set 201

Re: [Openstack] [OpenStack] [keystone] How to make keystone highly available?

2016-09-19 Thread Remo Mattei
There is already ha options with pacemaker and corosync. Have you looked at that? Inviato da iPhone > Il giorno 19 set 2016, alle ore 11:46, Alexandr Porunov > ha scritto: > > Hello, > > I am thinking about using the keystone as an authentication system but I am > afraid about failures whi

[Openstack] [OpenStack] [keystone] How to make keystone highly available?

2016-09-19 Thread Alexandr Porunov
Hello, I am thinking about using the keystone as an authentication system but I am afraid about failures which can affect all the cluster. In fact if the keystone server dies then our full cluster will stop. It would be better if we could use HA with the keystone. Then if our primary keystone serv

Re: [Openstack] [OpenStack] [Swift] Can we use tempauth with version 2 or 3 of identity?

2016-09-19 Thread John Dickinson
Tempauth is really only for internal use and removing dependencies when testing. It does not support v2 or v3 auth APIs. I'd suggest using keystone instead. --John > On Sep 19, 2016, at 8:46 AM, Alexandr Porunov > wrote: > > Hello, > > I am using tempauth for authentication. Here what I us

[Openstack] [Devstack] How to configure SPICE local.conf

2016-09-19 Thread Silvia Fichera
Hi all, I'm installing Openstack Mitaka via Devstack. Since there is a bug in horizon (reported here https://bugs.launchpad.net/horizon/+bug/1622684 ) I'm trying to configure my setup to work with Spice instead of vnc. I didn't found any guide to write properly the local.conf to use spice, so I sup

Re: [Openstack] [VMware][cinder] Unable to assign a specific data store for cinder

2016-09-19 Thread Vaidyanath Manogaran
Thanks for the response. Let me try it. On Sep 19, 2016 6:01 PM, "Avishay Traeger" wrote: > Sure. You can do so by using volume types. See the example here: > https://wiki.openstack.org/wiki/Cinder-multi-backend > In the "Volume Type" section, you can see how the volume_backend_name key > is s

[Openstack] [OpenStack] [Swift] Can we use tempauth with version 2 or 3 of identity?

2016-09-19 Thread Alexandr Porunov
Hello, I am using tempauth for authentication. Here what I use: curl -v -H 'X-Auth-User: admin:admin' -H 'X-Auth-Key: admin' http://192.168.0.58:8080/auth/v1.0/ But I need to use v2 or v3 because I use a Java Client (jclouds) which can use only v2 or v3 authentication. I tried: curl -H "Content-

Re: [Openstack] [openstack][neutron][VMware] Do we have an option to select the port group from vcenter server?

2016-09-19 Thread Vaidyanath Manogaran
Thanks Gary. Let me try it. On Sep 19, 2016 5:19 PM, "Gary Kotton" wrote: > Hi, > > You can create a provider network that uses an existing port-group. Please > note that nova requires this patch - https://review.openstack.org/358425 > > Thanks > > Gary > > > > *From: *Vaidyanath Manogaran > *D

Re: [Openstack] [VMware][cinder] Unable to assign a specific data store for cinder

2016-09-19 Thread Avishay Traeger
Sure. You can do so by using volume types. See the example here: https://wiki.openstack.org/wiki/Cinder-multi-backend In the "Volume Type" section, you can see how the volume_backend_name key is set. When this key is set, any volume created with that volume type will go to that backend. If that

Re: [Openstack] [openstack][neutron][VMware] Do we have an option to select the port group from vcenter server?

2016-09-19 Thread Gary Kotton
Hi, You can create a provider network that uses an existing port-group. Please note that nova requires this patch - https://review.openstack.org/358425 Thanks Gary From: Vaidyanath Manogaran Date: Monday, September 19, 2016 at 2:20 PM To: "commun...@lists.openstack.org" , "openstack@lists.opens

[Openstack] [VMware][cinder] Unable to assign a specific data store for cinder

2016-09-19 Thread Vaidyanath Manogaran
I m unable to assign a specific data store for cinder to use. Is there any option available for this?? Regards Vaidyanath ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.openstack.org Unsubsc

[Openstack] [openstack][neutron][VMware] Do we have an option to select the port group from vcenter server?

2016-09-19 Thread Vaidyanath Manogaran
When I use VMware DVS integration with neutron, I don't get the option to select port group. Is there any opinions that needs to be set for the same?? Regards Vaidyanath ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post