Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-21033

[nmstate] [ipsec] Need support of `rightsubnet` and `leftmodecfgclient` options

    • nmstate-2.2.23-1.el9
    • ZStream
    • sst_network_management
    • ssg_networking
    • 1
    • False
    • Hide

      None

      Show
      None
    • No
    • NMT - RHEL 8.10/9.4 DTM 22
    • Approved Blocker
    • Hide

      Given a system administrator managing network configurations using nmstate,

      When they configure an IPsec tunnel with nmstate by setting the 'rightsubnet' to a remote /32 IPv4 address and 'leftmodecfgclient' to 'no', for a P2P (Host-to-Host) IPsec tunnel, 

      Then, the IPsec tunnel should be successfully established, with the correct P2P policy being created and displayed in 'ip xfrm policy', reflecting the specified source and destination IPs in the tunnel mode.

      Definition of Done:

      • The implementation meets the acceptance criteria
      • Unit test and integration test are written and pass
      • The code is part of a build attached to an errata
      • The code is backported into rhel-9.2
         
      Show
      Given a system administrator managing network configurations using nmstate, When they configure an IPsec tunnel with nmstate by setting the 'rightsubnet' to a remote /32 IPv4 address and 'leftmodecfgclient' to 'no', for a P2P (Host-to-Host) IPsec tunnel,  Then, the IPsec tunnel should be successfully established, with the correct P2P policy being created and displayed in 'ip xfrm policy', reflecting the specified source and destination IPs in the tunnel mode. Definition of Done: The implementation meets the acceptance criteria Unit test and integration test are written and pass The code is part of a build attached to an errata The code is backported into rhel-9.2  
    • Pass
    • Release Note Not Required

      In order to fix https://issues.redhat.com/browse/RHEL-20690 , nmstate is required to provide support of `rightsubnet` and `leftmodecfgclient`.

       

            fge@redhat.com Gris Ge
            fge@redhat.com Gris Ge
            Gris Ge Gris Ge
            Mingyu Shi Mingyu Shi
            Votes:
            0 Vote for this issue
            Watchers:
            11 Start watching this issue

              Created:
              Updated:
              Resolved: