<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>Hi</div>
<div><br>
</div>
<div>I traced it back to MAC-spoofing rule (not promisc mode).</div>
<div>By default the rule applies to all VM, I.e. :</div>
<div><br>
</div>
<div>
<pre class="code" style="padding: 0.5em; border: 1px dashed rgb(85, 85, 85); color: rgb(85, 85, 85); background-color: rgb(245, 245, 245); overflow: auto !important; line-height: 18px; margin: 10px; font-size: 13px; text-align: left; ">in_port=<PORT>,dl_src=<MAC>,priority=40000,actions=normal
in_port=<PORT>,priority=39000,actions=normal</pre>
</div>
<div>This prevented bridging to work properly inside a VM. </div>
<div>It worked OK once I deleted flows, I.e.:</div>
<div><br>
</div>
<div>
<div>/usr/bin/ovs-ofctl del-flows --strict br0 in_port=128,dl_src=02:00:c0:a8:0d:01,priority=40000</div>
<div>/usr/bin/ovs-ofctl del-flows --strict br0 in_port=128,priority=39000</div>
</div>
<div><br>
</div>
<div>Now I'll be looking for a way to delete flows for certain VM based on some attributes in template or image, perhaps Hooks?</div>
<div><span style="font-family: Helvetica; font-size: medium; ">--</span><br style="font-family: Helvetica; font-size: medium; ">
<span style="font-family: Helvetica; font-size: medium; ">Thank you,</span><br style="font-family: Helvetica; font-size: medium; ">
<br style="font-family: Helvetica; font-size: medium; ">
<span style="font-family: Helvetica; font-size: medium; ">Dmitri Chebotarov</span><br style="font-family: Helvetica; font-size: medium; ">
<span style="font-family: Helvetica; font-size: medium; ">VCL Sys Eng, Engineering & Architectural Support, TSD - Ent Servers & Messaging</span><br style="font-family: Helvetica; font-size: medium; ">
<span style="font-family: Helvetica; font-size: medium; ">223 Aquia Building, Ffx, MSN: 1B5</span><br style="font-family: Helvetica; font-size: medium; ">
<span style="font-family: Helvetica; font-size: medium; ">Phone: (703) 993-6175 | Fax: (703) 993-3404</span><br style="font-family: Helvetica; font-size: medium; ">
<br style="font-family: Helvetica; font-size: medium; ">
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Dimach Chebotarov <<a href="mailto:dchebota@gmu.edu">dchebota@gmu.edu</a>><br>
<span style="font-weight:bold">Date: </span>Thursday, August 29, 2013 21:04 <br>
<span style="font-weight:bold">To: </span>"<a href="mailto:users@lists.opennebula.org">users@lists.opennebula.org</a>" <<a href="mailto:users@lists.opennebula.org">users@lists.opennebula.org</a>><br>
<span style="font-weight:bold">Subject: </span>[one-users] Host's openvswitch promiscuous mode for VMs<br>
</div>
<div><br>
</div>
<div dir="ltr">
<meta name="GENERATOR" content="MSHTML 10.00.9200.16660">
<style id="owaParaStyle"><!--P {
MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px
}
--></style>
<div fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<p>Hi</p>
<p> </p>
<p>I'm not sure if this applies to opennebula, or should I direct it to an OVS forum/group:</p>
<p> </p>
<p>I'm trying to build a Linux bridge to extend my network into another cloud. The bridge is running inside Linux VM, which is hosted on opennebula host /w openvswitch. The bridge configuration requires interface to be in promiscuous mode (inside VM) to work
properly, but I cannot find a way to permit promiscuous mode for the VM's interface (vnetX) on the host. This is similar to what VMware vSwtich has to permit promiscuous mode inside VM.
</p>
<p> </p>
<p>I've duplicated the same configuration on my local WKS using VirtualBox and it works OK as soon as permit promiscuous mode for network interface.
</p>
<p> </p>
<p>I apologize for spam if it doesn't apply to this group...</p>
<p> </p>
<p>Thanks.</p>
</div>
</div>
</div>
</span>
</body>
</html>