[ovs-discuss] Anything wrong with my settings, using two NICs for VPN.

luckydog xf luckydogxf at gmail.com
Wed Dec 26 01:00:36 UTC 2018


Let me keep my question simple.

eth2(a VM, running VPN service) <----- > tap-XXX  <---->Br-int(ovs) <----->
br-eth2 <---->eth2 (Physical server) ---Physical Switch ---->DHCP server

Now, eth2 of VM could get an IP by `dhclient en2`, while user dials in,
eth2 of VM would use as VPN, No IP returns for that user.

Here is tcpdump a port of Br-int( named qvo5641c94b ), it receives DHCP
reqeust, withou any reply.
----------------------
# tcpdump -i "qvo5641c94b-c6" -vvv -e port 67 and port 68

    0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP,
Request from ca:77:93:42:a2:66 (oui Unknown), length 290, xid 0xaf40ae86,
Flags [none] (0x0000)
          Client-Ethernet-Address ca:77:93:42:a2:66 (oui Unknown)
          Vendor-rfc1048 Extensions
            Magic Cookie 0x63825363
            DHCP-Message Option 53, length 1: Discover
            Client-ID Option 61, length 7: ether ca:77:93:42:a2:66
            Hostname Option 12, length 11: "Bob-PC"
            Vendor-Class Option 60, length 8: "MSFT 5.0"
            Parameter-Request Option 55, length 12:
              Subnet-Mask, Domain-Name, Default-Gateway, Domain-Name-Server
              Netbios-Name-Server, Netbios-Node, Netbios-Scope,
Router-Discovery
              Static-Route, Classless-Static-Route,
Classless-Static-Route-Microsoft, Vendor-Option
            END Option 255, length 0
---------------------------------------

Please note that ca:77:93:42:a2:66 is the MAC Address of a  windows user's
Computer NIC, he tried to dial in VPN.

Physical eth2 SHOULD receive DHCP reqeust if everything is fine, but turns
out it does not receive anything.

I check Flow Table of br-int.
----------------------------------------
 # ovs-ofctl dump-flows br-int
NXST_FLOW reply (xid=0x4):
 cookie=0xeac92ba0ae5f5890, duration=491263.261s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=80,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.253s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=52,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.246s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=7,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.238s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=39,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.230s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=71,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.222s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=53,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.215s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=33,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.198s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=48,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.190s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=28,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.182s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=46,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.174s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=47,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.156s, table=0, n_packets=7,
n_bytes=602, idle_age=61476, hard_age=65534,
priority=10,icmp6,in_port=49,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.148s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=38,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.139s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=70,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.130s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=45,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.122s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=15,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.113s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=43,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=432266.483s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=102,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=432168.401s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=10,icmp6,in_port=103,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=78435.943s, table=0, n_packets=20,
n_bytes=1720, idle_age=60766, hard_age=65534,
priority=10,icmp6,in_port=114,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=78357.937s, table=0, n_packets=4,
n_bytes=344, idle_age=60336, hard_age=65534,
priority=10,icmp6,in_port=115,icmp_type=136 actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=56725.714s, table=0, n_packets=0,
n_bytes=0, idle_age=56725, priority=10,icmp6,in_port=116,icmp_type=136
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.259s, table=0, n_packets=7238,
n_bytes=303996, idle_age=27, hard_age=65534, priority=10,arp,in_port=80
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.252s, table=0, n_packets=2605,
n_bytes=109410, idle_age=77, hard_age=65534, priority=10,arp,in_port=52
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.244s, table=0, n_packets=339,
n_bytes=14238, idle_age=1271, hard_age=65534, priority=10,arp,in_port=7
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.236s, table=0, n_packets=2732,
n_bytes=114744, idle_age=25120, hard_age=65534, priority=10,arp,in_port=39
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.229s, table=0, n_packets=34,
n_bytes=1428, idle_age=65534, hard_age=65534, priority=10,arp,in_port=71
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.220s, table=0, n_packets=604,
n_bytes=25368, idle_age=708, hard_age=65534, priority=10,arp,in_port=53
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.212s, table=0, n_packets=19,
n_bytes=798, idle_age=34673, hard_age=65534, priority=10,arp,in_port=33
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.196s, table=0, n_packets=1234,
n_bytes=51828, idle_age=1059, hard_age=65534, priority=10,arp,in_port=48
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.188s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534, priority=10,arp,in_port=28
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.180s, table=0, n_packets=15738,
n_bytes=660996, idle_age=9, hard_age=65534, priority=10,arp,in_port=46
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.172s, table=0, n_packets=14691,
n_bytes=617022, idle_age=3, hard_age=65534, priority=10,arp,in_port=47
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.155s, table=0, n_packets=6606,
n_bytes=277452, idle_age=61475, hard_age=65534, priority=10,arp,in_port=49
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.146s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534, priority=10,arp,in_port=38
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.137s, table=0, n_packets=625,
n_bytes=26250, idle_age=708, hard_age=65534, priority=10,arp,in_port=70
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.128s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534, priority=10,arp,in_port=45
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.120s, table=0, n_packets=71388,
n_bytes=2998296, idle_age=17, hard_age=65534, priority=10,arp,in_port=15
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=491263.111s, table=0, n_packets=603,
n_bytes=25326, idle_age=708, hard_age=65534, priority=10,arp,in_port=43
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=432266.481s, table=0, n_packets=287,
n_bytes=12054, idle_age=1466, hard_age=65534, priority=10,arp,in_port=102
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=432168.399s, table=0, n_packets=632,
n_bytes=26544, idle_age=708, hard_age=65534, priority=10,arp,in_port=103
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=78435.941s, table=0, n_packets=6024,
n_bytes=311136, idle_age=9, hard_age=65534, priority=10,arp,in_port=114
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=78357.935s, table=0, n_packets=2344,
n_bytes=111188, idle_age=40, hard_age=65534, priority=10,arp,in_port=115
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=56725.712s, table=0, n_packets=918,
n_bytes=38556, idle_age=25, priority=10,arp,in_port=116
actions=resubmit(,24)
 cookie=0xeac92ba0ae5f5890, duration=9133067.572s, table=0,
n_packets=862508133, n_bytes=57206099952, idle_age=0, hard_age=65534,
priority=2,in_port=1 actions=drop
 cookie=0xeac92ba0ae5f5890, duration=491263.263s, table=0, n_packets=54014,
n_bytes=50389481, idle_age=18, hard_age=65534, priority=9,in_port=80
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.256s, table=0,
n_packets=209884, n_bytes=16427300, idle_age=82, hard_age=65534,
priority=9,in_port=52 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.248s, table=0, n_packets=17342,
n_bytes=1192607, idle_age=1276, hard_age=65534, priority=9,in_port=7
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.240s, table=0,
n_packets=1839524, n_bytes=41456765844, idle_age=25009, hard_age=65534,
priority=9,in_port=39 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.232s, table=0, n_packets=3530,
n_bytes=247670, idle_age=65534, hard_age=65534, priority=9,in_port=71
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.225s, table=0, n_packets=591,
n_bytes=51504, idle_age=39186, hard_age=65534, priority=9,in_port=53
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.217s, table=0, n_packets=14,
n_bytes=4788, idle_age=34678, hard_age=65534, priority=9,in_port=33
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.201s, table=0, n_packets=24513,
n_bytes=1735025, idle_age=1064, hard_age=65534, priority=9,in_port=48
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.192s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534, priority=9,in_port=28
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.184s, table=0,
n_packets=286882070, n_bytes=549710148773, idle_age=0, hard_age=65534,
priority=9,in_port=46 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.176s, table=0,
n_packets=39127272, n_bytes=5018273012, idle_age=0, hard_age=65534,
priority=9,in_port=47 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.159s, table=0,
n_packets=182078, n_bytes=16693258, idle_age=61476, hard_age=65534,
priority=9,in_port=49 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.150s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534, priority=9,in_port=38
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.141s, table=0, n_packets=5608,
n_bytes=28287455, idle_age=64932, hard_age=65534, priority=9,in_port=70
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.132s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534, priority=9,in_port=45
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.124s, table=0, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534, priority=9,in_port=15
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.115s, table=0,
n_packets=120758, n_bytes=3972840749, idle_age=16929, hard_age=65534,
priority=9,in_port=43 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=432266.485s, table=0, n_packets=31338,
n_bytes=2125793, idle_age=1471, hard_age=65534, priority=9,in_port=102
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=432168.403s, table=0,
n_packets=2046282, n_bytes=11410020003, idle_age=16867, hard_age=65534,
priority=9,in_port=103 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=78435.945s, table=0, n_packets=7017,
n_bytes=786368, idle_age=14, hard_age=65534, priority=9,in_port=114
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=78357.940s, table=0, n_packets=52759,
n_bytes=6612717, idle_age=19, hard_age=65534, priority=9,in_port=115
actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=56725.717s, table=0, n_packets=131496,
n_bytes=7532025, idle_age=7, priority=9,in_port=116 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=9133065.562s, table=0,
n_packets=531150281, n_bytes=399620754586, idle_age=0, hard_age=65534,
priority=3,in_port=1,dl_vlan=507 actions=mod_vlan_vid:4,resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=9133065.558s, table=0,
n_packets=142497758, n_bytes=326903893136, idle_age=3, hard_age=65534,
priority=3,in_port=1,dl_vlan=506 actions=mod_vlan_vid:6,resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=78438.049s, table=0, n_packets=17313,
n_bytes=2300912, idle_age=1, hard_age=65534,
priority=3,in_port=1,dl_vlan=508 actions=mod_vlan_vid:17,resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=9133067.852s, table=0, n_packets=1719,
n_bytes=293671, idle_age=56727, hard_age=65534, priority=0
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=9133067.853s, table=23, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534, priority=0 actions=drop
 cookie=0xeac92ba0ae5f5890, duration=491263.262s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=80,icmp_type=136,nd_target=fe80::f816:3eff:fe71:22a0
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.254s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=52,icmp_type=136,nd_target=fe80::f816:3eff:fe18:240f
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.247s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=7,icmp_type=136,nd_target=fe80::f816:3eff:fe50:fd5
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.239s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=39,icmp_type=136,nd_target=fe80::f816:3eff:fea9:96ab
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.231s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=71,icmp_type=136,nd_target=fe80::f816:3eff:feaa:3eb1
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.223s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=53,icmp_type=136,nd_target=fe80::f816:3eff:fe05:2df
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.215s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=33,icmp_type=136,nd_target=fe80::f816:3eff:fe7e:9486
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.199s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=48,icmp_type=136,nd_target=fe80::f816:3eff:fece:151e
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.191s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=28,icmp_type=136,nd_target=fe80::f816:3eff:fe69:c951
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.183s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=46,icmp_type=136,nd_target=fe80::f816:3eff:fe40:4dbb
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.175s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=47,icmp_type=136,nd_target=fe80::f816:3eff:fe4c:17e0
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.157s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=49,icmp_type=136,nd_target=fe80::f816:3eff:fe7a:333c
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.149s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=38,icmp_type=136,nd_target=fe80::f816:3eff:fedc:fe18
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.140s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=70,icmp_type=136,nd_target=fe80::f816:3eff:fe46:6663
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.131s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=45,icmp_type=136,nd_target=fe80::f816:3eff:feb3:26ab
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.123s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=15,icmp_type=136,nd_target=fe80::f816:3eff:fe4f:fae2
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.114s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=43,icmp_type=136,nd_target=fe80::f816:3eff:fef0:1bef
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=432266.484s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=102,icmp_type=136,nd_target=fe80::f816:3eff:fee7:a1a8
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=432168.402s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=103,icmp_type=136,nd_target=fe80::f816:3eff:fe58:55
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=78435.944s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=114,icmp_type=136,nd_target=fe80::f816:3eff:fea5:8e6f
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=78357.938s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,icmp6,in_port=115,icmp_type=136,nd_target=fe80::f816:3eff:feeb:c9f4
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=56725.715s, table=24, n_packets=0,
n_bytes=0, idle_age=56725,
priority=2,icmp6,in_port=116,icmp_type=136,nd_target=fe80::f816:3eff:fe0b:24a8
actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.260s, table=24, n_packets=7238,
n_bytes=303996, idle_age=27, hard_age=65534,
priority=2,arp,in_port=80,arp_spa=172.16.107.21 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.252s, table=24, n_packets=2605,
n_bytes=109410, idle_age=77, hard_age=65534,
priority=2,arp,in_port=52,arp_spa=172.16.106.23 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.245s, table=24, n_packets=339,
n_bytes=14238, idle_age=1271, hard_age=65534,
priority=2,arp,in_port=7,arp_spa=172.16.107.20 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.237s, table=24, n_packets=2732,
n_bytes=114744, idle_age=25120, hard_age=65534,
priority=2,arp,in_port=39,arp_spa=172.16.106.12 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.230s, table=24, n_packets=34,
n_bytes=1428, idle_age=65534, hard_age=65534,
priority=2,arp,in_port=71,arp_spa=172.16.107.18 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.222s, table=24, n_packets=604,
n_bytes=25368, idle_age=708, hard_age=65534,
priority=2,arp,in_port=53,arp_spa=172.16.106.16 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.214s, table=24, n_packets=19,
n_bytes=798, idle_age=34673, hard_age=65534,
priority=2,arp,in_port=33,arp_spa=172.16.107.23 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.198s, table=24, n_packets=1234,
n_bytes=51828, idle_age=1059, hard_age=65534,
priority=2,arp,in_port=48,arp_spa=172.16.107.15 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.190s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,arp,in_port=28,arp_spa=172.16.107.22 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.182s, table=24,
n_packets=15738, n_bytes=660996, idle_age=9, hard_age=65534,
priority=2,arp,in_port=46,arp_spa=172.16.107.14 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.174s, table=24,
n_packets=14691, n_bytes=617022, idle_age=3, hard_age=65534,
priority=2,arp,in_port=47,arp_spa=172.16.107.19 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.156s, table=24, n_packets=6585,
n_bytes=276570, idle_age=61584, hard_age=65534,
priority=2,arp,in_port=49,arp_spa=172.16.106.8 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.148s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,arp,in_port=38,arp_spa=172.16.107.5 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.139s, table=24, n_packets=625,
n_bytes=26250, idle_age=708, hard_age=65534,
priority=2,arp,in_port=70,arp_spa=172.16.106.22 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.130s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,arp,in_port=45,arp_spa=172.16.107.6 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.122s, table=24, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,arp,in_port=15,arp_spa=172.16.106.17 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=491263.113s, table=24, n_packets=600,
n_bytes=25200, idle_age=708, hard_age=65534,
priority=2,arp,in_port=43,arp_spa=172.16.106.13 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=432266.483s, table=24, n_packets=287,
n_bytes=12054, idle_age=1466, hard_age=65534,
priority=2,arp,in_port=102,arp_spa=172.16.107.12 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=432168.401s, table=24, n_packets=629,
n_bytes=26418, idle_age=708, hard_age=65534,
priority=2,arp,in_port=103,arp_spa=172.16.106.15 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=78435.943s, table=24, n_packets=1872,
n_bytes=78624, idle_age=9, hard_age=65534,
priority=2,arp,in_port=114,arp_spa=172.16.108.7 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=78357.937s, table=24, n_packets=1434,
n_bytes=60228, idle_age=40, hard_age=65534,
priority=2,arp,in_port=115,arp_spa=172.16.106.5 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=56725.714s, table=24, n_packets=915,
n_bytes=38430, idle_age=25,
priority=2,arp,in_port=116,arp_spa=172.16.106.11 actions=resubmit(,25)
 cookie=0xeac92ba0ae5f5890, duration=9133067.851s, table=24,
n_packets=1536562, n_bytes=64610256, idle_age=17, hard_age=65534,
priority=0 actions=drop
 cookie=0xeac92ba0ae5f5890, duration=491263.266s, table=25,
n_packets=61252, n_bytes=50693477, idle_age=18, hard_age=65534,
priority=2,in_port=80,dl_src=fa:16:3e:71:22:a0 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.258s, table=25,
n_packets=212489, n_bytes=16536710, idle_age=77, hard_age=65534,
priority=2,in_port=52,dl_src=fa:16:3e:18:24:0f actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.251s, table=25,
n_packets=17681, n_bytes=1206845, idle_age=1271, hard_age=65534,
priority=2,in_port=7,dl_src=fa:16:3e:50:0f:d5 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.243s, table=25,
n_packets=1842256, n_bytes=41456880588, idle_age=25009, hard_age=65534,
priority=2,in_port=39,dl_src=fa:16:3e:a9:96:ab actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.236s, table=25, n_packets=3564,
n_bytes=249098, idle_age=65534, hard_age=65534,
priority=2,in_port=71,dl_src=fa:16:3e:aa:3e:b1 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.228s, table=25, n_packets=1195,
n_bytes=76872, idle_age=708, hard_age=65534,
priority=2,in_port=53,dl_src=fa:16:3e:05:02:df actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.220s, table=25, n_packets=33,
n_bytes=5586, idle_age=34673, hard_age=65534,
priority=2,in_port=33,dl_src=fa:16:3e:7e:94:86 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.204s, table=25,
n_packets=25747, n_bytes=1786853, idle_age=1059, hard_age=65534,
priority=2,in_port=48,dl_src=fa:16:3e:ce:15:1e actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.196s, table=25, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,in_port=28,dl_src=fa:16:3e:69:c9:51 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.187s, table=25,
n_packets=286897808, n_bytes=549710809769, idle_age=0, hard_age=65534,
priority=2,in_port=46,dl_src=fa:16:3e:40:4d:bb actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.179s, table=25,
n_packets=39141963, n_bytes=5018890034, idle_age=0, hard_age=65534,
priority=2,in_port=47,dl_src=fa:16:3e:4c:17:e0 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.163s, table=25,
n_packets=188663, n_bytes=16969828, idle_age=61476, hard_age=65534,
priority=2,in_port=49,dl_src=fa:16:3e:7a:33:3c actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.154s, table=25, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,in_port=38,dl_src=fa:16:3e:dc:fe:18 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.145s, table=25, n_packets=6233,
n_bytes=28313705, idle_age=708, hard_age=65534,
priority=2,in_port=70,dl_src=fa:16:3e:46:66:63 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.137s, table=25, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,in_port=45,dl_src=fa:16:3e:b3:26:ab actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.128s, table=25, n_packets=0,
n_bytes=0, idle_age=65534, hard_age=65534,
priority=2,in_port=15,dl_src=fa:16:3e:4f:fa:e2 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=491263.119s, table=25,
n_packets=121358, n_bytes=3972865949, idle_age=708, hard_age=65534,
priority=2,in_port=43,dl_src=fa:16:3e:f0:1b:ef actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=432266.490s, table=25,
n_packets=31623, n_bytes=2137707, idle_age=1466, hard_age=65534,
priority=2,in_port=102,dl_src=fa:16:3e:e7:a1:a8 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=432168.408s, table=25,
n_packets=2046909, n_bytes=11410046281, idle_age=708, hard_age=65534,
priority=2,in_port=103,dl_src=fa:16:3e:58:00:55 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=78435.950s, table=25, n_packets=8286,
n_bytes=756292, idle_age=9, hard_age=65534,
priority=2,in_port=114,dl_src=fa:16:3e:a5:8e:6f actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=78357.945s, table=25, n_packets=54014,
n_bytes=6638277, idle_age=19, hard_age=65534,
priority=2,in_port=115,dl_src=fa:16:3e:eb:c9:f4 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=56725.722s, table=25,
n_packets=132409, n_bytes=7570315, idle_age=7,
priority=2,in_port=116,dl_src=fa:16:3e:0b:24:a8 actions=resubmit(,60)
 cookie=0xeac92ba0ae5f5890, duration=9133067.852s, table=60,
n_packets=2184315298, n_bytes=3401652892507, idle_age=0, hard_age=65534,
priority=3 actions=NORMAL
------------------------------------------

Mac address of eth2  belongs to that  VM ( VPN server) is *
fa:16:3e:a5:8e:6f *.

Seeing from flow table of br-int, VPN user's MAC isn't in flow table, so
traffics generated by VPN dialing in would be dropped by this flow table.

Is my guess right?  Any work around if so?

Thanks,



On Wed, Dec 26, 2018 at 12:32 AM Ben Pfaff <blp at ovn.org> wrote:

> On Tue, Dec 25, 2018 at 05:37:53PM +0800, luckydog xf wrote:
> >     I'm using OpenVswitch and Openstack to build an instance with two
> NICs
> > named eth0 and eth1, both NICs get IP by DHCP of DNSmasq.
> >
> >     I also build a SoftEther VPN serice, eth0  is as management IP for
> SSH,
> > while eth1 as IP assignment  when VPN user dials in.
> >
> >    Eth0 is 105.6/24 and eth1 is 108.7/24, when user dials in, eth1 cannot
> > get an IP for him. I use ` tcpdump` to find that phsical NIC(name ethX)
> > which eth2 of this instance attach to  does not receive any dhcp request
> at
> > all.
> >
> >    I use `dhcpclient eth1`, ethX gets dhcp reqest and reply.
> >
> >    I guess `flow table` or something may drop requests sent by users when
> > he dials in.  But it's hard to debug.
>
> It sounds like you've added eth0 and eth1 to a bridge and afterward
> tried to get an IP address on eth1.  That won't work, you have to get
> the IP address on an internal port (e.g. br0) instead.  See the FAQ for
> more information.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openvswitch.org/pipermail/ovs-discuss/attachments/20181226/e41ed8c5/attachment-0001.html>


More information about the discuss mailing list