rhel: Poke iptables hole for gre in init scripts.
authorEthan Jackson <ethan@nicira.com>
Thu, 1 Sep 2011 00:56:07 +0000 (17:56 -0700)
committerEthan Jackson <ethan@nicira.com>
Thu, 1 Sep 2011 01:27:01 +0000 (18:27 -0700)
rhel/etc_init.d_openvswitch

index 6f7fe69..5501d18 100755 (executable)
@@ -31,9 +31,6 @@
 test -e /etc/sysconfig/openvswitch && . /etc/sysconfig/openvswitch
 
 start () {
-    # Allow GRE traffic.
-    /sbin/iptables -I INPUT -p gre -j ACCEPT
-
     set $ovs_ctl ${1-start}
     set "$@" --system-id=random
     if test X"$FORCE_COREFILES" != X; then
@@ -50,6 +47,8 @@ start () {
     fi
     "$@"
 
+    $ovs_ctl --protocol=gre enable-protocol
+
     touch /var/lock/subsys/openvswitch
 }