Shulou(Shulou.com)06/03 Report--

Install and configure network components on the controller node

Installation package # yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables configuration server component network service component configuration includes data, authentication mechanism, message queue, topology change notification and plug-ins. Edit the / etc/neutron/neutron.conf file and complete the following actions: ○ In the [database] section, configure database access: [database] #. Connection = mysql+pymysql://neutron:neutron123@dbs.flex.net/neutron Note: comment or remove other connection options in the [database] area ○ In the [DEFAULT] section, enable the Modular Layer 2 (ML2) plug-in and disable additional plug-ins: [DEFAULT] #. Core_plugin = ml2 service_plugins = ○ In the [DEFAULT] section, configure RabbitMQ message queue access: [DEFAULT] #... Transport_url = rabbit://openstack:openstack123@dbs.flex.net ○ In the [DEFAULT] and [keystone_authtoken] sections, configure Identity service access: [DEFAULT] #. Auth_strategy = keystone [keystone_authtoken] #... Www_authenticate_uri = http://stack.flex.net:5000 auth_url = http://stack.flex.net:5000 memcached_servers = dbs.flex.net:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = neutron password = neutron123 Note: comment or remove other connection options in the [keystone_authtoken] area ○ In the [DEFAULT] and [nova] sections Configure Networking to notify Compute of network topology changes: [DEFAULT] #... Notify_nova_on_port_status_changes = true notify_nova_on_port_data_changes = true [nova] auth_url = http://stack.flex.net:5000 auth_type = password project_domain_name = default user_domain_name = default region_name = RegionOne project_name = service username = nova password = nova123 ○ In the [oslo_concurrency] section, configure the lock path: [oslo_concurrency] #. Lock_path = / var/lib/neutron/tmp configuration module Layer 2 (ML2) plug-in uses the ML2 plug-in in the actual column, and ML2 uses the Linux bridge mechanism to establish the layer-2 (bridging and switching) virtual network architecture. Edit the / etc/neutron/plugins/ml2/ml2_conf.ini file and complete the following actions: ○ In the [ml2] section, enable flat and VLAN networks: [ml2] #... Type_drivers = flat,vlan ○ In the [ml2] section, disable self-service networks: [ml2] #... Tenant_network_types = ○ In the [ml2] section, enable the Linux bridge mechanism: [ml2] #... Mechanism_drivers = linuxbridge warning: removing this option from type_drivers after configuring the ML2 plug-in will cause database inconsistencies. ○ In the [ml2] section, enable the port security extension driver: [ml2] #. Extension_drivers = port_security ○ In the [ml2_type_flat] section, configure the provider virtual network as a flat network: [ml2_type_flat] #... Flat_networks = provider ○ In the [securitygroup] section, enable ipset to increase efficiency of securitygroup rules: [securitygroup] #... Enable_ipset = trueConfigure the Linux bridge agent The Linux bridge agent builds layer-2 (bridging and switching) virtual networking infrastructure for instances and handles security groups. Edit the / etc/neutron/plugins/ml2/linuxbridge_agent.ini file and complete the following actions: ○ In the [linux_bridge] section, map the provider virtual network to the provider physical network interface: [linux_bridge] physical_interface_mappings = provider:eht1 uses the eth2 physical network interface as the tenant's network connection. ○ In the [vxlan] section, disable VXLAN overlay networks: [vxlan] enable_vxlan = false ○ In the [securitygroup] section Enable security groups and configure the Linux bridge iptables firewall driver: [securitygroup] #... Enable_security_group = true firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver ○ Ensure your Linux operating system kernel supports network bridge filters by verifying all the following sysctl values are set to 1: net.bridge.bridge-nf-call-iptables net.bridge.bridge-nf-call-ip6tables # modprobe br_netfilter # vi / etc/sysctl.conf net.bridge.bridge-nf-call-ip6tables = 1 net.bridge.bridge-nf-call-iptables = 1 # sysctl-p net.bridge.bridge-nf-call-ip6tables = 1 net.bridge.bridge-nf-call-iptables = 1 to support bridging for the network Usually you need to load the br_netfilter kernel module. But you can ignore the error here and it will load automatically when you restart neutron.

Configure the DHCP agent

The DHCP agent provides DHCP services for virtual networks.Edit the / etc/neutron/dhcp_agent.ini file and complete the following actions: ○ In the [DEFAULT] section, configure the Linux bridge interface driver, Dnsmasq DHCP driver, and enable isolated metadata so instances on provider networks can access metadata over the network: [DEFAULT] #... interface_driver = linuxbridgedhcp_driver = neutron.agent.linux.dhcp.Dnsmasqenable_isolated_metadata = true return to network configuration or continue network option 2.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.