Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Application Test of Openflow flow Table-- Logic isolation

2025-01-19 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

1. Build the topology

A three-layer binary tree network was built, and the pingall connectivity test could not be completed by turning on SimpleSwitch4.py, so the topology was changed to a simple line, four switches (OF13) were connected into a line, and two hosts were hung under each switch, and h2--h8 in turn

S1 = net.addSwitch ('S1, cls=OVSKernelSwitch, protocols='OpenFlow13', mac='00:00:00:00:00:11')

S2 = net.addSwitch ('S2, cls=OVSKernelSwitch, protocols='OpenFlow13', mac='00:00:00:00:00:12')

S3 = net.addSwitch ('s 3clients, cls=OVSKernelSwitch, protocols='OpenFlow13', mac='00:00:00:00:00:13')

S4 = net.addSwitch ('s4miles, cls=OVSKernelSwitch, protocols='OpenFlow13', mac='00:00:00:00:00:14')

H2 = net.addHost ('H2, ip='10.0.0.1', defaultRoute=None, mac='00:00:00:00:00:01')

H3 = net.addHost ('h3pm, ip='10.0.0.2', defaultRoute=None, mac='00:00:00:00:00:02')

H4 = net.addHost ('h4pm, ip='10.0.0.3', defaultRoute=None, mac='00:00:00:00:00:03')

H5 = net.addHost ('h5pm, ip='10.0.0.4', defaultRoute=None, mac='00:00:00:00:00:04')

H6 = net.addHost ('h6pm, ip='10.0.0.5', defaultRoute=None, mac='00:00:00:00:00:05')

H7 = net.addHost ('H7legs, ip='10.0.0.6', defaultRoute=None, mac='00:00:00:00:00:06')

H7 = net.addHost ('H7legs, ip='10.0.0.7', defaultRoute=None, mac='00:00:00:00:00:07')

H8 = net.addHost ('h8legs, ip='10.0.0.8', defaultRoute=None, mac='00:00:00:00:00:08')

Net.addLink (S1, H2)

Net.addLink (S1, H3)

Net.addLink (S2, h4)

Net.addLink (S2, h5)

Net.addLink (S3, H6)

Net.addLink (S3, H7)

Net.addLink (S4, H7)

Net.addLink (S4, H8)

Net.addLink (S1, S2)

Net.addLink (S2, S3)

Net.addLink (S3, S4)

2. Turn on the ryu controller

Command: sudo ryu-manager-- observe-links simple_switch_13.py ofctl_rest.py rest_topology.py

Ofctl_rest.py: the API reserved for sending and viewing the flow table later

3. Conduct connectivity test

Use the pingall command to test the connectivity of the topology in the mininet interface

4. Use Postman to view the flow table of each switch

Check the connection of each port and make preparations for logical isolation (know the port between the host and the switch, and have a good idea when sending out the flow table)

5. Logical isolation

5.1. test the DELETE method

Enter the http://127.0.0.1:8080/stats/flowentry/clear/1 method in the Postman Url column and select DELETE.

That is, delete all flow tables on S1, so H2 and h3 will be cut off from the outside world and tested with pingall:

Success.

5.2. test the Modify command (POST) method

The flow table is sent successfully (cut off the message of finding host 7 on switch 2 from port 1, and the action set is set to empty), and test pingall

Success.

Continue testing, modify the information on switch 1 from port 1 to find host 8 (below) and h4 look for H8 message on host 2 (unmapped)

Mininet Test:

Success.

6. Summary

Through the above methods, a simple logical isolation function can be achieved.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report