Hi,
we have an juju openstack wallaby cluster. We created the network with ipv6 and not the dual stack.
When i enable the neutron ml2_port_ security, the ipv6 is not working. When i disable the ml2_port_security, the ipv6 is working perfectly. But i want the ml2_port_security to be enabled. I dont know where this issue is caused.
I have to add any parameter in ml2_conf.ini to allow the ipv6 traffic. My security groups also looks perfect.
Ml2_conf.ini :
# queens
###############################################################################
# [ WARNING ]
# Configuration file maintained by Juju. Local changes may be overwritten.
###############################################################################
[ml2]
port_security_enabled = True
extension_drivers=port_security
type_drivers = geneve,gre,vlan,flat,local
tenant_network_types = geneve,gre,vlan,flat,local
mechanism_drivers = ovn
path_mtu = 1500
[ml2_type_gre]
tunnel_id_ranges = 1:1000
[ml2_type_vxlan]
vni_ranges = 1001:2000
[ml2_type_vlan]
network_vlan_ranges = physnet1:1000:2000
supported_pci_vendor_devs = *
[ml2_type_flat]
flat_networks = physnet1
[ovs]
enable_tunneling = True
local_ip = 10.153.67.74
[agent]
tunnel_types = gre
[securitygroup]
enable_ipset = True
enable_security_group = True
[ovn]
ovn_nb_connection = ssl:10.153.67.70:6641,ssl:10.153.67.38:6641,ssl:10.153.67.94:6641
ovn_nb_private_key = /etc/neutron/plugins/ml2/key_host
ovn_nb_certificate = /etc/neutron/plugins/ml2/cert_host
ovn_nb_ca_cert = /etc/neutron/plugins/ml2/neutron-api-plugin-ovn.crt
ovn_sb_connection = ssl:10.153.67.70:16642,ssl:10.153.67.38:16642,ssl:10.153.67.94:16642
ovn_sb_private_key = /etc/neutron/plugins/ml2/key_host
ovn_sb_certificate = /etc/neutron/plugins/ml2/cert_host
ovn_sb_ca_cert = /etc/neutron/plugins/ml2/neutron-api-plugin-ovn.crt
ovn_l3_scheduler = leastloaded
ovn_metadata_enabled = True
enable_distributed_floating_ip = False
dns_servers =
dhcp_default_lease_time = 43200
ovn_dhcp4_global_options =
ovn_dhcp6_global_options =
vhost_sock_dir = /run/libvirt-vhost-user
[ml2_type_geneve]
vni_ranges = 1001:2000
max_header_size = 38