CentOS 7
Sponsored Link

OpenStack Pike : Neutron Network (FLAT)
2017/09/04
 
Configure virtual networking by OpenStack Network Service (Neutron).
For example, configure FLAT type of provider networking on here.
Before it, Configure basic settings on Control Node, Network Node, Compute Node.
Furthermore, this example is based on the environment that Network Node and Compute Node have 2 network interfaces.
     ------------+---------------------------+---------------------------+------------
                 |                           |                           |
             eth0|10.0.0.30              eth0|10.0.0.50              eth0|10.0.0.51
     +-----------+-----------+   +-----------+-----------+   +-----------+-----------+
     |    [ Control Node ]   |   |    [ Network Node ]   |   |    [ Compute Node ]   |
     |                       |   |                       |   |                       |
     |  MariaDB    RabbitMQ  |   |      Open vSwitch     |   |        Libvirt        |
     |  Memcached  httpd     |   |        L2 Agent       |   |     Nova Compute      |
     |  Keystone   Glance    |   |        L3 Agent       |   |      Open vSwitch     |
     |  Nova API             |   |     Metadata Agent    |   |        L2 Agent       |
     |  Neutron Server       |   |                       |   |                       |
     |  Metadata Agent       |   |                       |   |                       |
     +-----------------------+   +-----------+-----------+   +-----------+-----------+
                                             |eth1                       |eth1

[1] Change settings like follows on both Network Node and Compute Node.
# add bridge

[[email protected] ~]#
ovs-vsctl add-br br-eth1

# add eth1 to the port of the bridge above

[[email protected] ~]#
ovs-vsctl add-port br-eth1 eth1

[[email protected] ~]#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# line 166: add

[ml2_type_flat]
flat_networks = physnet1
[[email protected] ~]#
vi /etc/neutron/plugins/ml2/openvswitch_agent.ini
# line 180: add

[ovs]
bridge_mappings = physnet1:br-eth1
[[email protected] ~]#
systemctl restart neutron-openvswitch-agent

[2] Create network. It's OK to work on any node. (This example is on Control Node)
[[email protected] ~(keystone)]#
projectID=`openstack project list | grep service | awk '{print $2}'`
# create network named [sharednet1]

[[email protected] ~(keystone)]#
openstack network create --project $projectID \
--share --provider-network-type flat --provider-physical-network physnet1 sharednet1

Created a new network:
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        |                                      |
| created_at                | 2017-09-05T08:27:04Z                 |
| description               |                                      |
| dns_domain                | None                                 |
| id                        | a738c6d8-126b-4b2b-bb35-305c3372f54a |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| is_default                | False                                |
| is_vlan_transparent       | None                                 |
| mtu                       | 1500                                 |
| name                      | sharednet1                           |
| port_security_enabled     | True                                 |
| project_id                | c9ab6e9feb4d444c8f637fcfe7a67305     |
| provider:network_type     | flat                                 |
| provider:physical_network | physnet1                             |
| provider:segmentation_id  | None                                 |
| qos_policy_id             | None                                 |
| revision_number           | 2                                    |
| router:external           | Internal                             |
| segments                  | None                                 |
| shared                    | True                                 |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tags                      |                                      |
| updated_at                | 2017-09-05T08:27:04Z                 |
+---------------------------+--------------------------------------+

# create subnet [10.0.0.0/24] in [sharednet1]

[[email protected] ~(keystone)]#
openstack subnet create subnet1 --network sharednet1 \
--project $projectID --subnet-range 10.0.0.0/24 \
--allocation-pool start=10.0.0.200,end=10.0.0.254 \
--gateway 10.0.0.1 --dns-nameserver 10.0.0.10

Created a new subnet:
+-------------------------+--------------------------------------+
| Field                   | Value                                |
+-------------------------+--------------------------------------+
| allocation_pools        | 10.0.0.200-10.0.0.254                |
| cidr                    | 10.0.0.0/24                          |
| created_at              | 2017-09-05T08:29:09Z                 |
| description             |                                      |
| dns_nameservers         | 10.0.0.10                            |
| enable_dhcp             | True                                 |
| gateway_ip              | 10.0.0.1                             |
| host_routes             |                                      |
| id                      | 60004ac5-89f9-48be-a09f-661c76ff5d58 |
| ip_version              | 4                                    |
| ipv6_address_mode       | None                                 |
| ipv6_ra_mode            | None                                 |
| name                    | subnet1                              |
| network_id              | a738c6d8-126b-4b2b-bb35-305c3372f54a |
| project_id              | c9ab6e9feb4d444c8f637fcfe7a67305     |
| revision_number         | 0                                    |
| segment_id              | None                                 |
| service_types           |                                      |
| subnetpool_id           | None                                 |
| tags                    |                                      |
| updated_at              | 2017-09-05T08:29:09Z                 |
| use_default_subnet_pool | None                                 |
+-------------------------+--------------------------------------+

# confirm settings

[[email protected] ~(keystone)]#
openstack network list

+--------------------------------------+------------+--------------------------------------+
| ID                                   | Name       | Subnets                              |
+--------------------------------------+------------+--------------------------------------+
| a738c6d8-126b-4b2b-bb35-305c3372f54a | sharednet1 | 60004ac5-89f9-48be-a09f-661c76ff5d58 |
+--------------------------------------+------------+--------------------------------------+
[3] Create and start a Virtual machine Instance with the network just created above.
[[email protected] ~(keystone)]#
netID=`openstack network list | grep sharednet1 | awk '{ print $2 }'`

[[email protected] ~(keystone)]#
openstack image list

+--------------------------------------+---------+--------+
| ID                                   | Name    | Status |
+--------------------------------------+---------+--------+
| 68132026-60aa-4afe-8976-398b0482cfd6 | CentOS7 | active |
+--------------------------------------+---------+--------+

# create a keypair

[[email protected] ~(keystone)]#
ssh-keygen -q -N ""

Enter file in which to save the key (/root/.ssh/id_rsa):
# add the public key

[[email protected] ~(keystone)]#
openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey

+-------------+-------------------------------------------------+
| Field       | Value                                           |
+-------------+-------------------------------------------------+
| fingerprint | b3:d6:64:1a:6f:4e:14:63:88:76:15:a4:bd:af:a6:34 |
| name        | mykey                                           |
| user_id     | 09d8dfa20e0f40eaae448d369943b195                |
+-------------+-------------------------------------------------+

[[email protected] ~(keystone)]#
openstack server create --flavor m1.small --image CentOS7 --security-group default --nic net-id=$netID --key-name mykey CentOS_7
[[email protected] ~(keystone)]#
openstack server list

+--------------------------------------+----------+--------+-----------------------+---------+----------+
| ID                                   | Name     | Status | Networks              | Image   | Flavor   |
+--------------------------------------+----------+--------+-----------------------+---------+----------+
| 344a5689-1512-4bba-af64-43b580e5dcbb | CentOS_7 | ACTIVE | sharednet1=10.0.0.202 | CentOS7 | m1.small |
+--------------------------------------+----------+--------+-----------------------+---------+----------+
[4] Configure security settings like follows to access with SSH and ICMP.
# permit ICMP

[[email protected] ~(keystone)]#
openstack security group rule create --protocol icmp --ingress default

Created a new security_group_rule:
+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| created_at        | 2017-09-05T08:36:23Z                 |
| description       |                                      |
| direction         | ingress                              |
| ether_type        | IPv4                                 |
| id                | 99059300-c8ba-4680-b4ea-654c95766462 |
| name              | None                                 |
| port_range_max    | None                                 |
| port_range_min    | None                                 |
| project_id        | 09158bee8c6441519bf3a3743d936566     |
| protocol          | icmp                                 |
| remote_group_id   | None                                 |
| remote_ip_prefix  | 0.0.0.0/0                            |
| revision_number   | 0                                    |
| security_group_id | b5e75eee-2435-4b69-afd9-d097179ce150 |
| updated_at        | 2017-09-05T08:36:23Z                 |
+-------------------+--------------------------------------+

# permit SSH

[[email protected] ~(keystone)]#
openstack security group rule create --protocol tcp --dst-port 22:22 default

Created a new security_group_rule:
+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| created_at        | 2017-09-05T08:36:38Z                 |
| description       |                                      |
| direction         | ingress                              |
| ether_type        | IPv4                                 |
| id                | d655a400-08d6-4275-b3f4-a7a0681502b6 |
| name              | None                                 |
| port_range_max    | 22                                   |
| port_range_min    | 22                                   |
| project_id        | 09158bee8c6441519bf3a3743d936566     |
| protocol          | tcp                                  |
| remote_group_id   | None                                 |
| remote_ip_prefix  | 0.0.0.0/0                            |
| revision_number   | 0                                    |
| security_group_id | b5e75eee-2435-4b69-afd9-d097179ce150 |
| updated_at        | 2017-09-05T08:36:38Z                 |
+-------------------+--------------------------------------+

[[email protected] ~(keystone)]#
openstack security group rule list

+--------------+-------------+-----------+------------+-----------------------------+-------------------+
| ID           | IP Protocol | IP Range  | Port Range | Remote Security Group       | Security Group    |
+--------------+-------------+-----------+------------+-----------------------------+-------------------+
| 1ac6e187-... | None        | None      |            | None                        | b5e75eee-2435-... |
| 655ac54e-... | None        | None      |            | None                        | b5e75eee-2435-... |
| 76f54486-... | None        | None      |            | b5e75eee-2435-4b69-afd9-... | b5e75eee-2435-... |
| 99059300-... | icmp        | 0.0.0.0/0 |            | None                        | b5e75eee-2435-... |
| 9fd12567-... | None        | None      |            | b5e75eee-2435-4b69-afd9-... | b5e75eee-2435-... |
| d655a400-... | tcp         | 0.0.0.0/0 | 22:22      | None                        | b5e75eee-2435-... |
+--------------+-------------+-----------+------------+-----------------------------+-------------------+
[5] Login to Instance.
[[email protected] ~(keystone)]#
The authenticity of host '10.0.0.202 (10.0.0.202)' can't be established.
ECDSA key fingerprint is 94:11:48:02:fa:62:ff:9c:c4:75:8f:eb:16:62:a9:ff.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.0.0.202' (ECDSA) to the list of known hosts.
[[email protected] ~]$    
# just logined