Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BMC allows us to configure reserved IP addresses like Loopback, Broadcast, Network ID & multicast IP addreses #45

Open
swe12345 opened this issue Jan 5, 2022 · 13 comments
Assignees

Comments

@swe12345
Copy link

swe12345 commented Jan 5, 2022

BMC allows us to configure reserved IP addresses like Loopback, Broadcast, Network ID & multicast IP addreses.
Expectation: Should throw an error while configuring these Reserved & non-routable IP addresses.

Tried configuration with 127.0.0.1, 10.5.5.255

@swe12345
Copy link
Author

swe12345 commented Jan 5, 2022

@ratagupt

@swe12345
Copy link
Author

@sunharis

@raviteja-b
Copy link
Contributor

raviteja-b commented Jan 12, 2022

As per discord discussion, Networkd validate the IP addresses as per the inet_pton criteria

seems its discussed in the past and the decision was to just make sure that the configured IP address is inet_pton compatible.
seems this is working as expected @ratagupt @wak-google

@prkatti1
Copy link

These IP addresses loopback, network-ID etc are valid IP addresses, but reserved IP addresses and have specific purpose.
These are valid IPs, but is it valid to configure reserved IP addresses on interfaces??
I see after configuring reserved IPs, system wont be reachable via those IPs, if not routable why we are allowing these IPs to get configured??
Can you Pls share your opinion/suggestion is it expected behavior or we should not allow to configure reserved IPs on BMC n/w interfaces @ratagupt @wak-google

@ratagupt
Copy link
Contributor

ratagupt commented Feb 3, 2022

There will be too much of such validation checks, it is good to have those checks, I would assume the network admin should know that it should not configure such addresses on the interface.

@akenliu
Copy link

akenliu commented May 11, 2022

I find openbmc-test-automation has these test cases.
https://github.com/openbmc/openbmc-test-automation/blob/master/redfish/managers/test_bmc_network_conf.robot
-Configure Broadcast IP
-Configure Multicast IP
-Configure Loopback IP
-Configure Network ID

anoo1 pushed a commit to anoo1/phosphor-networkd that referenced this issue Jun 17, 2022
…penbmc#45)

Currently Network Manager is continuously looking up for NTP servers from
Systemd-Timesyncd when manual mode is set.

This commit fixes this behaviour and avoids reading NTP servers from
Systemd-Timesyncd in Manual mode
@rajesh-lega
Copy link

@swe12345 is there any conclusion, whether Dev team plan for any fix for this issue?
BMC doesnt know the multicast , broadcast and look-back addressed, its up to the user to properly configure the IP addresses to BMC, to me its expected one. if the boundary value is validated its fine

@wak-google
Copy link
Contributor

Yes, we should be able to block these configurations as there is no reason for any of them to be assigned to an active adapter.

@wak-google wak-google self-assigned this Feb 1, 2023
@hemanthkumarm-ami
Copy link

@wak-google any update on this.is there any timeline when this enhancement will be added?

@hemanthkumarm-ami
Copy link

@wak-google any update on this.is there any timeline when this enhancement will be added?

any update on this?

@williamspatrick
Copy link
Member

I doubt this is being actively worked. You are more than welcome to contribute a solution on Gerrit.

@sunharis
Copy link
Contributor

I see @wak-google has made these changes already. Set of changes like https://gerrit.openbmc.org/c/openbmc/phosphor-networkd/+/60772 and https://gerrit.openbmc.org/c/openbmc/phosphor-networkd/+/60771. These should get merged to fix this issue.

@mdmillerii
Copy link

The above (and possibly other) commits have been merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests