Sailaja Mada created CLOUDSTACK-2719: ----------------------------------------
Summary: Additional public IP is getting acquired during Cisco VNMc provider Guest Network restart (cleanup=true) Key: CLOUDSTACK-2719 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2719 Project: CloudStack Issue Type: Bug Security Level: Public (Anyone can view this level - this is the default.) Components: Network Controller Affects Versions: 4.2.0 Reporter: Sailaja Mada Priority: Critical Setup: Advanced Networking Zone, VMWARE Nexus enabled cluster Steps: 1. Create Guest network with Cisco VNMC provider offering 2. Deploy VM and add PF rules to the newly acquired IP , Add Firewall rules with Source NAT IP 3. Restart guest network with cleanup=true Observation: 1. All the rules got removed and recreated from ASA firewall 2. But observed that , there is one new public IP getting acquired during network restart . Check the log during network restart: 2013-05-28 17:09:56,234 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-125:job-138) Implementing the network Ntwk[213|Guest|14] elements and resources as a part of network restart 2013-05-28 17:09:56,245 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-125:job-138) Asking CiscoVNMC to implemenet Ntwk[213|Guest|14] 2013-05-28 17:09:56,290 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-125:job-138) Associate IP address called by the user 7 account 7 2013-05-28 17:09:56,292 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-125:job-138) Associate IP address lock acquired 2013-05-28 17:09:56,297 DEBUG [cloud.api.ApiServlet] (catalina-exec-22:null) ===START=== 10.144.6.19 -- GET command=queryAsyncJobResult&jobId=bc376ddd-c4b4-4af3-a3a7-7c8bda47f679&response=json&sessionkey=6Aq0T7RovVh%2BAdK%2B5qOzn4K88dU%3D&_=1369741357927 2013-05-28 17:09:56,320 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-125:job-138) Got 10.102.196.228 to assign for account 7 in zone 1 2013-05-28 17:09:56,320 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-125:job-138) Releasing lock account Acct[7-newuser1] 2013-05-28 17:09:56,322 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-125:job-138) Associate IP address lock released 2013-05-28 17:09:56,329 DEBUG [cloud.api.ApiServlet] (catalina-exec-22:null) ===END=== 10.144.6.19 -- GET command=queryAsyncJobResult&jobId=bc376ddd-c4b4-4af3-a3a7-7c8bda47f679&response=json&sessionkey=6Aq0T7RovVh%2BAdK%2B5qOzn4K88dU%3D&_=1369741357927 2013-05-28 17:09:56,329 DEBUG [cloud.user.AccountManagerImpl] (Job-Executor-125:job-138) Access to Ip[10.102.196.228-1] granted to Acct[7-newuser1] by DomainChecker_EnhancerByCloudStack_7b9c5b6e 2013-05-28 17:09:56,334 DEBUG [cloud.user.AccountManagerImpl] (Job-Executor-125:job-138) Access to Ntwk[213|Guest|14] granted to Acct[7-newuser1] by DomainChecker_EnhancerByCloudStack_7b9c5b6e 2013-05-28 17:09:56,338 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-125:job-138) Associating ip Ip[10.102.196.228-1] to network Ntwk[213|Guest|14] 2013-05-28 17:09:56,356 DEBUG [cloud.network.NetworkManagerImpl] (Job-Executor-125:job-138) Successfully associated ip address 10.102.196.228 to network Ntwk[213|Guest|14] 2013-05-28 17:09:56,359 DEBUG [agent.transport.Request] (Job-Executor-125:job-138) Seq 5-1442250838: Sending { Cmd , MgmtId: 214053811722752, via: 5, Ver: v1, Flags: 100011, [{"CreateLogicalEdgeFirewallCommand":{"_vlanId":807,"_publicIp":"10.102.196.228","_internalIp":"10.0.32.1","_publicSubnet":"255.255.255.0","_internalSubnet":"255.255.240.0","_publicGateways":["10.102.196.1","10.102.196.1"],"wait":0}}] } 2013-05-28 17:09:56,360 DEBUG [agent.transport.Request] (Job-Executor-125:job-138) Seq 5-1442250838: Executing: { Cmd , MgmtId: 214053811722752, via: 5, Ver: v1, Flags: 100011, [{"CreateLogicalEdgeFirewallCommand":{"_vlanId":807,"_publicIp":"10.102.196.228","_internalIp":"10.0.32.1","_publicSubnet":"255.255.255.0","_internalSubnet":"255.255.240.0","_publicGateways":["10.102.196.1","10.102.196.1"],"wait":0}}] } 2013-05-28 17:09:56,360 DEBUG [agent.manager.DirectAgentAttache] (DirectAgent-183:null) Seq 5-1442250838: Executing request 2013-05-28 17:09:57,076 DEBUG [agent.manager.DirectAgentAttache] (DirectAgent-183:null) Seq 5-1442250838: Response Received: 2013-05-28 17:09:57,076 DEBUG [agent.transport.Request] (DirectAgent-183:null) Seq 5-1442250838: Processing: { Ans: , MgmtId: 214053811722752, via: 5, Ver: v1, Flags: 10, [{"Answer":{"result":true,"details":"Success","wait":0}}] } -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira