Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-21033

[nmstate] [ipsec] Need support of `rightsubnet` and `leftmodecfgclient` options

XMLWordPrintable

    • nmstate-2.2.23-1.el9
    • ZStream
    • 1
    • rhel-sst-network-management
    • ssg_networking
    • 1
    • False
    • Hide

      None

      Show
      None
    • No
    • NMT - RHEL 8.10/9.4 DTM 22
    • Approved Blocker
    • Hide

      Given a system administrator managing network configurations using nmstate,

      When they configure an IPsec tunnel with nmstate by setting the 'rightsubnet' to a remote /32 IPv4 address and 'leftmodecfgclient' to 'no', for a P2P (Host-to-Host) IPsec tunnel, 

      Then, the IPsec tunnel should be successfully established, with the correct P2P policy being created and displayed in 'ip xfrm policy', reflecting the specified source and destination IPs in the tunnel mode.

      Definition of Done:

      • The implementation meets the acceptance criteria
      • Unit test and integration test are written and pass
      • The code is part of a build attached to an errata
      • The code is backported into rhel-9.2
         
      Show
      Given a system administrator managing network configurations using nmstate, When they configure an IPsec tunnel with nmstate by setting the 'rightsubnet' to a remote /32 IPv4 address and 'leftmodecfgclient' to 'no', for a P2P (Host-to-Host) IPsec tunnel,  Then, the IPsec tunnel should be successfully established, with the correct P2P policy being created and displayed in 'ip xfrm policy', reflecting the specified source and destination IPs in the tunnel mode. Definition of Done: The implementation meets the acceptance criteria Unit test and integration test are written and pass The code is part of a build attached to an errata The code is backported into rhel-9.2  
    • Pass
    • Automated
    • Release Note Not Required
    • None

      In order to fix https://issues.redhat.com/browse/RHEL-20690 , nmstate is required to provide support of `rightsubnet` and `leftmodecfgclient`.

       

              fge@redhat.com Gris Ge
              fge@redhat.com Gris Ge
              Gris Ge Gris Ge
              Mingyu Shi Mingyu Shi
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

                Created:
                Updated:
                Resolved: