From 2843f0148771d1d5c2f1ff1f0cf83183e30c54b9 Mon Sep 17 00:00:00 2001 From: QiLiang Date: Mon, 12 Sep 2016 11:36:39 +0800 Subject: set prevent_arp_spoofing to False when disable secgroup JIRA: - Change-Id: Idcfedf9fc48f4626ea93bcee1e4a11f69663a869 Signed-off-by: QiLiang --- .../ansible/openstack_mitaka/roles/secgroup/templates/neutron.j2 | 3 +++ .../openstack_mitaka_xenial/roles/secgroup/templates/neutron.j2 | 3 +++ deploy/adapters/ansible/roles/secgroup/templates/neutron.j2 | 3 +++ 3 files changed, 9 insertions(+) (limited to 'deploy/adapters/ansible') diff --git a/deploy/adapters/ansible/openstack_mitaka/roles/secgroup/templates/neutron.j2 b/deploy/adapters/ansible/openstack_mitaka/roles/secgroup/templates/neutron.j2 index aac6c8a2..e7107660 100644 --- a/deploy/adapters/ansible/openstack_mitaka/roles/secgroup/templates/neutron.j2 +++ b/deploy/adapters/ansible/openstack_mitaka/roles/secgroup/templates/neutron.j2 @@ -2,3 +2,6 @@ firewall_driver = neutron.agent.firewall.NoopFirewallDriver enable_security_group = True +[agent] +prevent_arp_spoofing = False + diff --git a/deploy/adapters/ansible/openstack_mitaka_xenial/roles/secgroup/templates/neutron.j2 b/deploy/adapters/ansible/openstack_mitaka_xenial/roles/secgroup/templates/neutron.j2 index aac6c8a2..e7107660 100644 --- a/deploy/adapters/ansible/openstack_mitaka_xenial/roles/secgroup/templates/neutron.j2 +++ b/deploy/adapters/ansible/openstack_mitaka_xenial/roles/secgroup/templates/neutron.j2 @@ -2,3 +2,6 @@ firewall_driver = neutron.agent.firewall.NoopFirewallDriver enable_security_group = True +[agent] +prevent_arp_spoofing = False + diff --git a/deploy/adapters/ansible/roles/secgroup/templates/neutron.j2 b/deploy/adapters/ansible/roles/secgroup/templates/neutron.j2 index 7b39e18c..9f3652c4 100644 --- a/deploy/adapters/ansible/roles/secgroup/templates/neutron.j2 +++ b/deploy/adapters/ansible/roles/secgroup/templates/neutron.j2 @@ -2,3 +2,6 @@ firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver enable_security_group = False +[agent] +prevent_arp_spoofing = False + -- cgit 1.2.3-korg