[ovs-discuss] [ovs-dev] Problem with fake bridges

[Ben Pfaff]

On Thu, May 10, 2012 at 07:15:52PM +0200, Daniele Milani wrote:
> > [adding the list back, please don't drop it again]
> > 
> > On Thu, May 10, 2012 at 06:17:33PM +0200, Daniele Milani wrote:
> > > > Date: Thu, 10 May 2012 09:07:29 -0700
> > > > From: blp at nicira.com
> > > > To: dano1988 at hotmail.it
> > > > CC: dev at openvswitch.org; roberto.sassu at polito.it; paolo.smiraglia at polito.it
> > > > Subject: Re: [ovs-dev] Problem with fake bridges
> > > > 
> > > > On Thu, May 10, 2012 at 05:25:51PM +0200, Daniele Milani wrote:
> > > > > I have the following situation:
> > > > > -I created two fake bridges on the same real bridge (br1 with tag=1 and br2 with tag=2);
> > > > > -I created two virtual machines (vm1 and vm2);
> > > > > -I attached the VM1 interface (vnet1) to br1, and the VM2 interface (vnet2) to br2;
> > > > > -I set br1 as default route of VM1 and br2 as default route of VM2;
> > > > > -if I run "$ ovs-vsctl show " I see that vnet1 tag is 1 and vnet2 is 2.
> > > > > 
> > > > > The problem is that, if I ping VM1 from VM2, or VM2 from VM1, the
> > > > > ping succeed.
> > > > 
> > > > What does "ovs-vsctl show" display?
> > > 
> > > This is the output I obtain:
> > > 
> > >     Bridge realbridge
> > >         Port "br2"
> > >             tag: 2
> > >             Interface "br2"
> > >                 type: internal
> > >         Port "vnet2"
> > >             tag: 2
> > >             Interface "vnet2"
> > >         Port "vnet1"
> > >             tag: 1
> > >             Interface "vnet1"
> > >         Port realbridge
> > >             Interface realbridge
> > >                 type: internal
> > >         Port "br1"
> > >             tag: 1
> > >             Interface "br1"
> > >                 type: internal
> > 
> > I agree that vnet1 and vnet2 should not be able to reach each other.
> > 
> > Run "ovs-dpctl show" and show us the output.  Then start a "ping"
> > between them, with little other traffic, and while it's going run
> > "ovs-dpctl dump-flows realbridge".  Also it'd be helpful to see the
> > output of "route -n" and "ifconfig".
> > 
> > Thanks,
> > 
> > Ben.
> 
> This is the output I obtain:

Your output doesn't match up with the "ovs-vsctl show" output you
showed previously.