Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-100774

Should disable IP on HSR port

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • nmstate-2.2.58-1.el10
    • No
    • Moderate
    • rhel-net-mgmt
    • 3
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • Hide

      Definition of Done:

      Please mark each item below with ( / ) if completed or ( x ) if incomplete:

      The acceptance criteria defined below are met.

      Given an hsr0 device is created using port1: eth1 and port2: eth2,
      When the HSR interface is applied via nmstatectl,
      Then IP addressing must be automatically disabled on eth1 and eth2 (i.e., ipv4.enabled: false, ipv6.enabled: false), unless explicitly overridden in YAML.

      ( ) Integration test case is available upstream

      Code is reviewed and merged upstream.

      Preliminary testing is done

      ( ) Upstream documentation is written in the upstream MR

      ( ) A demo is recorded

      Show
      Definition of Done: Please mark each item below with ( / ) if completed or ( x ) if incomplete: The acceptance criteria defined below are met. Given an hsr0 device is created using port1: eth1 and port2: eth2, When the HSR interface is applied via nmstatectl, Then IP addressing must be automatically disabled on eth1 and eth2 (i.e., ipv4.enabled: false, ipv6.enabled: false), unless explicitly overridden in YAML. ( ) Integration test case is available upstream Code is reviewed and merged upstream. Preliminary testing is done ( ) Upstream documentation is written in the upstream MR ( ) A demo is recorded
    • Pass
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      When creating HSR interface, the IP stack on its two ports should be disabled.

      What is the impact of this issue to you?

      N/A

      Please provide the package NVR for which the bug is seen:

      nmstate-2.2.46-1.el9

      How reproducible is this bug?:

      100%

      Steps to reproduce

      echo '
---
interfaces:
  - name: eth1
    type: ethernet
    state: up
    ipv4:
      address:
      - ip: 192.0.2.251
        prefix-length: 24
      dhcp: false
      enabled: true
    ipv6:
      enabled: false
' | sudo nmstatectl apply - 

echo '
  - name: hsr0
    type: hsr
    state: up
    copy-mac-from: eth1
    hsr:
      port1: eth1
      port2: eth2
      multicast-spec: 40
      protocol: prp' | sudo nmstatectl apply -

ip addr show dev eth1

      Expected results

      IP stack been disabled on eth1

      Actual results

      eth1 still have IP assigned before.

      Workaround: explicitly disable IP on HSR ports.

              rh-ee-mshi1 Mingyu Shi
              fge@redhat.com Gris Ge
              Network Management Team Network Management Team
              Mingyu Shi Mingyu Shi
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated: