openstack桥接-内外网设置

知识的价值不在于占有,而在于使用。这篇文章主要讲述openstack桥接-内外网设置相关的知识,希望能为你提供帮助。
在??https://blog.51cto.com/u_14814545/5169584??基础上,实现内外网
?控制端?
[root@control1 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[root@control1 ~]# grep "^[a-Z]" /etc/neutron/plugins/ml2/linuxbridge_agent.ini
physical_interface_mappings = internal:eth1,external:eth0
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
enable_vxlan = false

[root@control1 ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini
flat_networks = internal,external

重启neutron服务
[root@control1 ~]# systemctl restart neutron-linuxbridge-agent
[root@control1 ~]# systemctl restart neutron-server

【openstack桥接-内外网设置】?计算节点?
[root@node1 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[root@node1 ~]# grep "^[a-Z]" /etc/neutron/plugins/ml2/linuxbridge_agent.ini
physical_interface_mappings = internal:eth1,external:eth0
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
enable_vxlan = false

重启neutron服务
[root@node1 ~]# systemctl restart neutron-linuxbridge-agent
[root@node2 ~]# systemctl restart neutron-linuxbridge-agent

?控制端创建网络?
创建外网
[root@control1 ~]# source admin.sh
[root@control1 ~]# neutron net-create --shared --provider:physical_network external \\
--provider:network_type flat external-net
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Created a new network:
+---------------------------+--------------------------------------+
| Field| Value|
+---------------------------+--------------------------------------+
| admin_state_up| True|
| availability_zone_hints||
| availability_zones||
| created_at| 2022-04-05T10:41:56Z|
| description||
| id| aa310624-a955-44bd-854c-c03d8b74ffaf |
| ipv4_address_scope||
| ipv6_address_scope||
| mtu| 1500|
| name| external-net|
| port_security_enabled| True|
| project_id| abd8ed2affc3440eb98d996a13cc6cbd|
| provider:network_type| flat|
| provider:physical_network | external|
| provider:segmentation_id||
| revision_number| 1|
| router:external| False|
| shared| True|
| status| ACTIVE|
| subnets||
| tags||
| tenant_id| abd8ed2affc3440eb98d996a13cc6cbd|
| updated_at| 2022-04-05T10:41:56Z|
+---------------------------+--------------------------------------+

[root@control1 ~]# neutron subnet-create --name external-subnet\\
--allocation-pool start=192.168.47.100,end=192.168.47.200 \\
--dns-nameserver 223.5.5.5 external-net 192.168.47.0/24
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Created a new subnet:
+-------------------+------------------------------------------------------+
| Field| Value|
+-------------------+------------------------------------------------------+
| allocation_pools| "start": "192.168.47.100", "end": "192.168.47.200" |
| cidr| 192.168.47.0/24|
| created_at| 2022-04-05T10:47:25Z|
| description||
| dns_nameservers| 223.5.5.5|
| enable_dhcp| True|
| gateway_ip| 192.168.47.1|
| host_routes||
| id| e5ce1abc-6144-4905-a4a8-71fe53798a46|
| ip_version| 4|
| ipv6_address_mode ||
| ipv6_ra_mode||
| name| external-subnet|
| network_id| aa310624-a955-44bd-854c-c03d8b74ffaf|
| project_id| abd8ed2affc3440eb98d996a13cc6cbd|
| revision_number| 0|
| service_types||
| subnetpool_id||
| tags||
| tenant_id| abd8ed2affc3440eb98d996a13cc6cbd|
| updated_at| 2022-04-05T10:47:25Z|
+-------------------+------------------------------------------------------+

创建内网
[root@control1 ~]# neutron net-create --shared --provider:physical_network internal \\
--provider:network_type flat internal-net
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Created a new network:
+---------------------------+--------------------------------------+
| Field| Value|
+---------------------------+--------------------------------------+
| admin_state_up| True|
| availability_zone_hints||
| availability_zones||
| created_at| 2022-04-05T11:01:19Z|
| description||
| id| edf7ab13-bc77-4990-9b7e-fe1adba02a7f |
| ipv4_address_scope||
| ipv6_address_scope||
| mtu| 1500|
| name| internal-net|
| port_security_enabled| True|
| project_id| abd8ed2affc3440eb98d996a13cc6cbd|
| provider:network_type| flat|
| provider:physical_network | internal|
| provider:segmentation_id||
| revision_number| 1|
| router:external| False|
| shared| True|
| status| ACTIVE|
| subnets||
| tags||
| tenant_id| abd8ed2affc3440eb98d996a13cc6cbd|
| updated_at| 2022-04-05T11:01:19Z|
+------

    推荐阅读