系统运输
安装配置文件网络组件组件sonthecontrollernode。
安装组件
# yuminstallopenstack-neutronopenstack-neutron-ml2\\ & amp; quot;
开放式堆栈- neutron-linuxbridgeebtables
配置服务器组件
edit the/etc/neutron/neutron.conffileandcompletethefollowingactions :
是 In the [database] section,configure database access :
[数据库]
# .
connection=mysqlpymysql://neutron:neutron 123 @ stack.flex.net/neutron
注意: [database]区域包含注释和其他连接选项
In the [DEFAULT] section,enablethemodularlayer2(mL2 )插件,router service,and overlapping IP addresses :
[DEFAULT]
……
core_plugin=ml2
service_plugins=router
allow_overlapping_ips=true
In the [DEFAULT] section,configurerabbitmqmessagequeueaccess :
[DEFAULT]
……
transport _ URL=rabbit://open stack:open stack 123 @ DBS.flex.net
in the [ default ] and [ keystone _ authtok en ] sections,configure Identity service access :
[DEFAULT]
……
auth_strategy=keystone
[keystone_authtoken]
# .
www _ authenticate _ uri=http://stack.flex.net:5000
auth _ URL=http://stack.flex.net:5000
memcached _ servers=controller:11211
auth_type=password
project_domain_name=default
user_domain_name=default
项目_ name=服务
username=neutron
password=neutron123
附注:在[keystone_authtoken]区域中注释或删除其他选项。
in the [ default ] and [ nova ] sections,configurenetworkingtonotifycomputeofnetworktopologychanges :
[DEFAULT]
……
notify _ nova _ on _ port _ status _ changes=true
notify _ nova _ on _ port _ data _ changes=true
[nova]
# .
auth _ URL=http://stack.flex.net:5000
auth_type=password
project_domain_name=default
user_domain_name=default
region_name=RegionOne
项目_ name=服务
username=nova
password=nova123
in the [ Oslo _ concurrency ] section,configure the lock path :
[oslo_concurrency]
……
lock_path=/var/lib/neutron/tmp
3 .配置hemodularlayer2( ml2 )插件
them L2 plug-inusesthelinuxbridgemechanismtobuildlayer-2 ( bridgingandswitching )虚拟化图形用户界面
edit the/etc/neutron/plugins/ml2/ml2 _ conf.inifileandcompletethefollowingactions :
In the [ml2] section,enable flat,VLAN,and VXLAN networks :
[ml2]
……
type_drivers=flat,vlan,vxlan
In the [ml2] section,enablevxlanself-service networks :
[ml2]
……
tenant_network_types=vxlan
In the [ml2] section,enablethelinuxbridgeandlayer-2 population mechanisms :
[ml2]
……
mechanism_drivers=linuxbridge,l2population
注意:配置ML2插件后,如果从type_drivers中删除此选项,则会导致数据库不一致,并且Linux bridge仅支持VX局域网。
In the [ml2] section,enabletheportsecurityextensiondriver :
[ml2]
……
extension _ drivers=port _ security
In the [ml2_type_flat] section,configuretheprovidervirtualnetworkasaflatnetwork :
[ml2_type_flat]
……
flat_networks=provider
In the [ml2_type_vxlan] section,configurethevxlannetworkidentifierrangeforself-service networks :
[ml2_type_vxlan]
……
vni_ranges=1:1000
In the [securitygroup] section,enableipsettoincreaseefficiencyofsecuritygrouprules :
[securitygroup]
……
enable_ipset=true
4 .配置Linux bridge代理
thelinuxbridgeagentbuildslayer-2 ( bridgingandswitching ) virtualnetworkinginfrastructureforinstancesandhandlessecuritygrouproupuptygroutygler
edit the/etc/neutron/plugins/ml2/Linux bridge _ agent.inifileandcompletethefollowingactions :
In the [linux_bridge] section,maptheprovidervirtualnetworktotheproviderphysicalnetworkinterface :
[linux_bridge]
physical _ interface _ mappings=provider:external:eth 2
replace provider _ interface _ namewiththenameoftheunderlyingproviderphysicalnetworkinterface。
In the [vxlan] section,enable VXLAN overlay networks,configuretheipaddressofthephysicalnetworkinterfacethandlesoverlayncethation
[vxlan]
enable_vxlan=true
local _ IP=overlay _ interface _ IP _ address
l2_population=true
replace overlay _ interface _ IP _ addresswitheipaddressoftheunderlyingphysicalnetworkinterfacethandlesoverlaynetworks er tunneltraffictotheothernodes.therefore,replace overlay _ IP _ addresswithemanagementipaddresofthecontrollled
In the [securitygroup] section,enablesecuritygroupsandconfigurethelinuxbridgeiptablesfirewalldriver :
[securitygroup]
……
enable_security_group=true
firewall _ driver=neutron.agent.Linux.iptables _ firewall.iptablesfirewalldriver
ensureyourlinuxoperatingsystemkernelsupportsnetworkbridgefiltersbyverifyingallthefollowingsysctlvaluesaresetto1:
net.bridge.bridge-nf-call-iptables
net.bridge.bridge-nf-call-IP6tables
to enable networking bridge support,typicallythebr _ netfilterkernelmoduleneedstobeloaded.checkyouroperatingsystem’sdocument
5 .配置层- 3代理
thelayer-3(L3 )代理资源分配和服务服务。
edit the/etc/neutron/L3 _ agent.inifileandcompletethefollowingactions :
In the [DEFAULT] section,configurethelinuxbridgeinterfacedriverandexternalnetworkbridge :
[DEFAULT]
……
interface_driver=linuxbridge
6 .配置the DHCP agent
thedhcpagentprovidesdhcpservicesforvirtualnetworks。
edit the/etc/neutron/DHCP _ agent.inifileandcompletethefollowingactions :
In the [DEFAULT] section,configurethelinuxbridgeinterfacedriver,dnsmasq DHCP driver,andenableisolatedmetadatatasoinstationstion
[DEFAULT]
……
interface_driver=linuxbridge
hcp _ driver=neutron.agent.Linux.DHCP.dnsmasq
enable_isolated_metadata=true
完成后返回网络配置
详情请访问云服务器、域名注册、虚拟主机的问题,请访问西部数码代理商官方网站: www.chenqinet.cn