Openstack Ocata安装（Networking Option 2: Self-service networks）

一、安装并配置控制节点
创建数据库

# mysql -u root -pCREATE DATABASE neutron;GRANT ALL PRIVILEGESON neutron.* TO 'neutron'@'172.16.5.135' IDENTIFIED BY '123qwe';GRANT ALL PRIVILEGESON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123qwe';

创建服务认证(创建neutron用户、给neutron添加admin角色、创建neutron服务实体、创建网络服务API端口)：

# source /home/admin-openrc.sh# openstack user create --domain default --password-prompt neutron# openstack role add --project service --user neutron admin# openstack service create --name neutron --deion "OpenStack Networking" network# openstack endpoint create --region RegionOne network public http://controller:9696# openstack endpoint create --region RegionOne network internal http://controller:9696# openstack endpoint create --region RegionOne network admin http://controller:9696

二、配置网络选项
在控制节点上进行以下操作：
安装组件

# yum install openstack-neutron openstack-neutron-ml2openstack-neutron-linuxbridge ebtables

配置服务器组件

# vi /etc/neutron/neutron.conf

[database]connection=mysql+pymysql://neutron:123qwe@172.16.5.135/neutroncore_plugin=ml2service_plugins=routerallow_overlapping_ips=truetransport_url=rabbit://openstack:123qwe@172.16.5.135auth_strategy=keystonenotify_nova_on_port_status_changes=truenotify_nova_on_port_data_changes=true[keystone_authtoken]auth_uri=http://172.16.5.135:5000auth_url=http://172.16.5.135:35357memcached_servers=172.16.5.135:11211auth_type=passwordproject_domain_name=defaultuser_domain_name=defaultproject_name=serviceusername=neutronpassword=123qwe[nova]auth_url=http://172.16.5.135:35357auth_type=passwordproject_domain_name=defaultuser_domain_name=defaultregion_name=RegionOneproject_name=serviceusername=novapassword=123qwe[oslo_concurrency]lock_path=/var/lib/neutron/tmp

配置ML2

# vi /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]type_drivers=flat,vlan,vxlantenant_network_types=vxlanmechanism_drivers=linuxbridge,l2populationextension_drivers=port_security[ml2_type_flat]flat_networks=provider[ml2_type_vxlan]vni_ranges=1:1000[securitygroup]enable_ipset=true

配置Linux 桥接代理

# vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]physical_interface_mappings=provider:eth0[vxlan]enable_vxlan=truelocal_ip=172.16.5.135l2_population=true[securitygroup]enable_security_group=truefirewall_driver=neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

配置3层代理

# vi /etc/neutron/l3_agent.ini

[DEFAULT]interface_driver=linuxbridge

配置DHCP代理

# vi /etc/neutron/dhcp_agent.ini

[DEFAULT]interface_driver=linuxbridgedhcp_driver=neutron.agent.linux.dhcp.Dnsmasqenable_isolated_metadata=truenova_metadata_ip=controllermetadata_proxy_shared_secret=123qwe

配置计算服务来使用网络

# vi /etc/nova/nova.conf

[neutron]url=http://172.16.5.135:9696auth_url=http://172.16.5.135:35357auth_type=passwordproject_domain_name=defaultuser_domain_name=defaultregion_name=RegionOneproject_name=serviceusername=neutronpassword=123qweservice_metadata_proxy=truemetadata_proxy_shared_secret=123qwe

3.完成安装
建立符号链接

# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

上传数据库

# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

重启计算API服务

# systemctl restart openstack-nova-api.service

启动网络服务并配置开机启动

# systemctl enable neutron-server.serviceneutron-linuxbridge-agent.service neutron-dhcp-agent.serviceneutron-metadata-agent.service# systemctl start neutron-server.serviceneutron-linuxbridge-agent.service neutron-dhcp-agent.serviceneutron-metadata-agent.service

启用3层服务

# systemctl enable neutron-l3-agent.service# systemctl start neutron-l3-agent.service

三、安装和配置计算节点
安装组件

# yum install openstack-neutron-linuxbridge ebtables ipset

配置组件

# vi /etc/neutron/neutron.conf

[DEFAULT]transport_url = rabbit://openstack:123qwe@172.16.5.135auth_strategy = keystone[keystone_authtoken]auth_uri = http://172.16.5.135:5000auth_url = http://172.16.5.135:35357memcached_servers = 172.16.5.135:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = neutronpassword = 123qwe[oslo_concurrency]lock_path = /var/lib/neutron/tmp

配置桥接

# vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]physical_interface_mappings = provider:eth0[vxlan]enable_vxlan = truelocal_ip = 172.16.5.136l2_population = true[securitygroup]enable_security_group = truefirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

配置计算节点的网络服务

# vi /etc/nova/nova.conf

[neutron]url = http://172.16.5.135:9696auth_url = http://172.16.5.135:35357auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultregion_name = RegionOneproject_name = serviceusername = neutronpassword = 123qwe

完成安装

# systemctl restart openstack-nova-compute.service# systemctl enable neutron-linuxbridge-agent.service# systemctl start neutron-linuxbridge-agent.service

验证

# source /home/admin-openrc.sh# openstack extension list --network# openstack network agent list