Public bug reported: Reproduced on upstream devstack.
/etc/neutron/plugins/ml2/ml2_conf.ini has [securitygroup] firewall_driver = openvswitch The issue was triggered by the following script http://paste.openstack.org/show/545720/ (output from reproduction http://paste.openstack.org/show/545724/) Steps to reproduce: 1. create internal network and router connected to this network; set devstack public network as gateway. 2. create security group with ping/ssh allowed. 3. boot vm with security group from step 2 4. try to ping created vm Will result in Destination Host Unreachable. ** Affects: neutron Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1609090 Title: [ovs firewall] VM can't be reached regardless of security group with icmp allowed Status in neutron: New Bug description: Reproduced on upstream devstack. /etc/neutron/plugins/ml2/ml2_conf.ini has [securitygroup] firewall_driver = openvswitch The issue was triggered by the following script http://paste.openstack.org/show/545720/ (output from reproduction http://paste.openstack.org/show/545724/) Steps to reproduce: 1. create internal network and router connected to this network; set devstack public network as gateway. 2. create security group with ping/ssh allowed. 3. boot vm with security group from step 2 4. try to ping created vm Will result in Destination Host Unreachable. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1609090/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp

