Public bug reported:
Currently, this driver supports update of the VPN service, which one can
change the admin state to up or down.
In addition, even though IPSec site-to-site connection update is not
currently supported (one can do a delete/create), the user could create
the connection with admin state down.
When the service admin state is changed to down, the change does not
happen in the device driver, and the status is not reported correctly.
This is due to an issue with the plugin (bug 1291609 created). If later,
another change occurs that causes a sync of the config, the connections
on the VPN service will be deleted (the CSR REST API doesn't yet have
support for admin down), but the status still will not be updated
correctly. The configuration in OpenStack can get out of sync with the
configuration on the CSR.
If the IPSec site-to-site connection is created in admin down state, the
underlying tunnel is not created (correct), but the status still shows
PENDING_CREATE.
** Affects: neutron
Importance: Undecided
Assignee: Paul Michali (pcm)
Status: In Progress
** Changed in: neutron
Assignee: (unassigned) => Paul Michali (pcm)
** Changed in: neutron
Status: New => In Progress
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1291619
Title:
Cisco VPN device drivers admin state not reported correctly
Status in OpenStack Neutron (virtual network service):
In Progress
Bug description:
Currently, this driver supports update of the VPN service, which one
can change the admin state to up or down.
In addition, even though IPSec site-to-site connection update is not
currently supported (one can do a delete/create), the user could
create the connection with admin state down.
When the service admin state is changed to down, the change does not
happen in the device driver, and the status is not reported correctly.
This is due to an issue with the plugin (bug 1291609 created). If
later, another change occurs that causes a sync of the config, the
connections on the VPN service will be deleted (the CSR REST API
doesn't yet have support for admin down), but the status still will
not be updated correctly. The configuration in OpenStack can get out
of sync with the configuration on the CSR.
If the IPSec site-to-site connection is created in admin down state,
the underlying tunnel is not created (correct), but the status still
shows PENDING_CREATE.
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1291619/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
