[PVE-User] Proxmox VE 3.2 released!

Alexandre DERUMIER aderumier at odiso.com
Wed Mar 12 02:03:40 CET 2014


>>This does work for you? 

I don't have tested it myself.

I thinked it should work

see doc here: 
http://blog.scottlowe.org/2013/05/07/using-gre-tunnels-with-open-vswitch/

ovs-vsctl add-port vmbr0 gre0 -- set interface gre0 type=gre options:remote_ip=<GRE tunnel endpoint on other hypervisor>


But I just notice that in
/etc/network/if-pre-up.d/openvswitch

that
       OVSIntPort)
                ovs_vsctl -- --may-exist add-port "${IF_OVS_BRIDGE}"\
                    "${IFACE}" ${IF_OVS_OPTIONS} -- set Interface "${IFACE}"\
                    type=internal ${OVS_EXTRA+-- $OVS_EXTRA}


so my config,it's doing

ovs-vsctl add-port vmbr0 gre0  -- set interface gre0 type=internal -- set interface gre0 type=gre options:remote_ip=<GRE tunnel endpoint on other hypervisor>

that's why it doesn't work

So,indeed we need to use OVSTunnel in /etc/network/interface 

      OVSTunnel)
                ovs_vsctl -- --may-exist add-port "${IF_OVS_BRIDGE}"\
                    "${IFACE}" ${IF_OVS_OPTIONS} -- set Interface "${IFACE}" \
                    type=${IF_OVS_TUNNEL_TYPE} ${IF_OVS_TUNNEL_OPTIONS} \
                    ${OVS_EXTRA+-- $OVS_EXTRA}
                ;;
        *)


host1
------
allow-ovs vmbr0
iface br1 inet static
    address 192.168.1.1
    netmask 255.255.255.0
    ovs_type OVSBridge
    ovs_ports gre1

allow-vmbr0 gre1
iface gre1 inet manual
    ovs_bridge br1
    ovs_type OVSTunnel
    ovs_tunnel_type gre
    ovs_tunnel_options options:remote_ip=192.168.1.2 


host2
-----
allow-ovs vmbr0
iface br1 inet static
    address 192.168.1.2
    netmask 255.255.255.0
    ovs_type OVSBridge
    ovs_ports gre1

allow-vmbr0 gre1
iface gre1 inet manual
    ovs_bridge br1
    ovs_type OVSTunnel
    ovs_tunnel_type gre
    ovs_tunnel_options options:remote_ip=192.168.1.1 


Does that works for you ?


----- Mail original ----- 

De: "Diaolin" <diaolin at diaolin.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Envoyé: Mardi 11 Mars 2014 15:55:16 
Objet: Re: [PVE-User] Proxmox VE 3.2 released! 

Il 2014-03-11 11:19 Alexandre DERUMIER ha scritto: 
>>> the use of a simple gre tunnel does not mean "it's crypted" 
>>> it's only encapsulated. 
>>> 
>>> My goal is to add ipsec_gre to the interface 
>>> or vxlan and gre as simple ipip tunnels 
> 
> I think you can defined it using ovs_extra section in 
> /etc/network/interface 
> 
> 
> iface gre1 inet static 
> address X.X.X.X 
> netmask 255.255.255.0 
> ovs_type OVSIntPort 
> ovs_bridge vmbr0 
> ovs_extra set interface gre1 type=gre options:remote_ip=X.X.X.X 
> 
> 
> or for vxlan 
> 
> iface vxlan1 inet static 
> address X.X.X.X 
> netmask 255.255.255.0 
> ovs_type OVSIntPort 
> ovs_bridge vmbr0 
> ovs_extra set interface vxlan1 type=vxlan 
> options:remote_ip=X.X.X.X 
> 
> 

This does work for you? 

I've tested it but the tunnel does not work if i use 
OVSIntPort instead of OVSTunnel 

Diaolin 



--- 
S’à destacà l’ultima föia dal bósch nét 
crodàda l’ei, solàgna, ‘n mèzz ai sàssi 
e ‘ntant fis-ciava ‘n zìfol de oseleti 
a tegnìr vìo ‘l pensér che vèn matìna 
[Diaolin] 



More information about the pve-user mailing list