Openstack 中的router创建,floatingip绑定

来源:互联网 发布:网络安全设备巡检流程 编辑:程序博客网 时间:2024/06/06 09:14

 网络环境

管理网络:eth0 10.14.0.0/22 

数据网络: eth1  vlan105 192.168.105.0/24 ,vlan108 192.168.108.0/24

想要做的事:

1.连通vlan105和vlan108

2.使vlan108可以ping通管理网络10.14.0.0/22

3. 为vlan108下的vm绑定floatingip


1.连通vlan105和vlan108

创建router

[root@controller ~]# neutron router-create router01Created a new router:+-----------------------+--------------------------------------+| Field                 | Value                                |+-----------------------+--------------------------------------+| admin_state_up        | True                                 || distributed           | False                                || external_gateway_info |                                      || ha                    | False                                || id                    | 0567ae9d-00b4-4bbf-9413-2caf8182b8aa || name                  | router01                             || routes                |                                      || status                | ACTIVE                               || tenant_id             | 225e734464134ea79139eb6b0b202095     |+-----------------------+--------------------------------------+

查看子网

[root@controller ~]# neutron subnet-list+--------------------------------------+---------+------------------+-------------------------------------------------------+| id                                   | name    | cidr             | allocation_pools                                      |+--------------------------------------+---------+------------------+-------------------------------------------------------+| 7bf455ed-f912-4040-a6e9-7534a90193ff | subnet1 | 192.168.100.0/24 | {"start": "192.168.100.10", "end": "192.168.100.254"} || 76f8bbb0-52af-4b43-a246-679d6c456956 | subnet2 | 192.168.104.0/24 | {"start": "192.168.104.2", "end": "192.168.104.254"}  || 1083770f-d719-43e3-b3c2-a3a0ba6cec0e | subnet3 | 192.168.105.0/24 | {"start": "192.168.105.2", "end": "192.168.105.254"}  || df66e3aa-13ff-4dbb-84bb-20978da6f3f6 | subnet4 | 192.168.108.0/24 | {"start": "192.168.108.2", "end": "192.168.108.254"}  |+--------------------------------------+---------+------------------+-------------------------------------------------------+

为router01添加port

[root@controller ~]# neutron router-interface-add router01 subnet3Added interface 02bd9e7d-565c-4e1f-b18c-c10035dcf18c to router router01.[root@controller ~]# neutron router-interface-add router01 subnet4Added interface c9a5f63e-b772-4860-9804-88807ad04205 to router router01.[root@controller ~]# neutron router-port-list router01+--------------------------------------+------+-------------------+--------------------------------------------------------------------------------------+| id                                   | name | mac_address       | fixed_ips                                                                            |+--------------------------------------+------+-------------------+--------------------------------------------------------------------------------------+| 02bd9e7d-565c-4e1f-b18c-c10035dcf18c |      | fa:16:3e:23:3b:08 | {"subnet_id": "1083770f-d719-43e3-b3c2-a3a0ba6cec0e", "ip_address": "192.168.105.1"} || c9a5f63e-b772-4860-9804-88807ad04205 |      | fa:16:3e:a2:83:02 | {"subnet_id": "df66e3aa-13ff-4dbb-84bb-20978da6f3f6", "ip_address": "192.168.108.1"} |+--------------------------------------+------+-------------------+--------------------------------------------------------------------------------------+



2. 使vlan108可以ping通管理网络10.14.0.0/22

需要创建一个外部flat网络10.14.0.0/24 public01

由于public01是flat网络,vlan108是vlan网络,所以需要配置ML2 插件来支持同时使用多种二层网络技术

[root@controller ~]# cat /etc/neutron/plugins/ml2/ml2_conf.ini[ml2]# type_drivers = local,flat,vlan,gre,vxlan# Example: type_drivers = flat,vlan,gre,vxlan#type_drivers = vlantype_drivers = local,flat,vlan,gre,vxlan# (ListOpt) Ordered list of network_types to allocate as tenant# Example: tenant_network_types = vlan,gre,vxlantenant_network_types = vlan,gre,flat,vxlan

创建public01及其子网:

[root@controller ~]# neutron net-create  --tenant-id 225e734464134ea79139eb6b0b202095 public01 --provider:network_type flat --provider:physical_network physnet2 --router:external                   Created a new network:+---------------------------+--------------------------------------+| Field                     | Value                                |+---------------------------+--------------------------------------+| admin_state_up            | True                                 || id                        | 35776711-1ebb-4bc5-ae71-5552ca84709c || mtu                       | 0                                    || name                      | public01                             || provider:network_type     | flat                                 || provider:physical_network | physnet2                             || provider:segmentation_id  |                                      || router:external           | True                                 || shared                    | False                                || status                    | ACTIVE                               || subnets                   |                                      || tenant_id                 | 225e734464134ea79139eb6b0b202095     |+---------------------------+--------------------------------------+[root@controller ~]# neutron subnet-create --tenant-id 225e734464134ea79139eb6b0b202095 --name public01_subnet01 --gateway 10.14.0.1 public01 10.14.0.0/22 --disable-dhcpCreated a new subnet:+-------------------+----------------------------------------------+| Field             | Value                                        |+-------------------+----------------------------------------------+| allocation_pools  | {"start": "10.14.0.2", "end": "10.14.3.254"} || cidr              | 10.14.0.0/22                                 || dns_nameservers   |                                              || enable_dhcp       | False                                        || gateway_ip        | 10.14.0.1                                    || host_routes       |                                              || id                | 58f9a8e5-35fc-4cdc-bb1b-5caf854041b1         || ip_version        | 4                                            || ipv6_address_mode |                                              || ipv6_ra_mode      |                                              || name              | public01_subnet01                            || network_id        | 35776711-1ebb-4bc5-ae71-5552ca84709c         || subnetpool_id     |                                              || tenant_id         | 225e734464134ea79139eb6b0b202095             |+-------------------+----------------------------------------------+


为router01设置外部网络网关

[root@controller ~]# neutron router-gateway-set router01 public01Set gateway for router router01[root@controller ~]# neutron router-show router01+-----------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+| Field                 | Value                                                                                                                                                                                 |+-----------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+| admin_state_up        | True                                                                                                                                                                                  || distributed           | False                                                                                                                                                                                 || external_gateway_info | {"network_id": "35776711-1ebb-4bc5-ae71-5552ca84709c", "enable_snat": true, "external_fixed_ips": [{"subnet_id": "58f9a8e5-35fc-4cdc-bb1b-5caf854041b1", "ip_address": "10.14.0.2"}]} || ha                    | False                                                                                                                                                                                 || id                    | 0567ae9d-00b4-4bbf-9413-2caf8182b8aa                                                                                                                                                  || name                  | router01                                                                                                                                                                              || routes                |                                                                                                                                                                                       || status                | ACTIVE                                                                                                                                                                                || tenant_id             | 225e734464134ea79139eb6b0b202095                                                                                                                                                      |+-----------------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+



3.为vlan108下的vm绑定floatingip

创建floating network

[root@controller ~]# neutron net-list+--------------------------------------+----------+-------------------------------------------------------+| id                                   | name     | subnets                                               |+--------------------------------------+----------+-------------------------------------------------------+| 664009bf-4067-4ddc-98a2-577184d0e83b | net1     | 7bf455ed-f912-4040-a6e9-7534a90193ff 192.168.100.0/24 || 239d0325-5a65-4369-a05c-635b583f6185 | vlan104  | 76f8bbb0-52af-4b43-a246-679d6c456956 192.168.104.0/24 || c82499d2-4ac8-4307-a1f7-6a0495ecdc62 | vlan105  | 1083770f-d719-43e3-b3c2-a3a0ba6cec0e 192.168.105.0/24 || edb46047-8e99-48f7-93c2-05322327716d | vlan108  | df66e3aa-13ff-4dbb-84bb-20978da6f3f6 192.168.108.0/24 || 35776711-1ebb-4bc5-ae71-5552ca84709c | public01 | 58f9a8e5-35fc-4cdc-bb1b-5caf854041b1 10.14.0.0/22     |+--------------------------------------+----------+-------------------------------------------------------+[root@controller ~]# neutron floatingip-create 35776711-1ebb-4bc5-ae71-5552ca84709cCreated a new floatingip:+---------------------+--------------------------------------+| Field               | Value                                |+---------------------+--------------------------------------+| fixed_ip_address    |                                      || floating_ip_address | 10.14.0.3                            || floating_network_id | 35776711-1ebb-4bc5-ae71-5552ca84709c || id                  | a4ec7165-7233-4ef4-8795-98d7df9a01f1 || port_id             |                                      || router_id           |                                      || status              | DOWN                                 || tenant_id           | 225e734464134ea79139eb6b0b202095     |+---------------------+--------------------------------------+

绑定到vm的port上

[root@controller ~]# neutron port-list+--------------------------------------+------+-------------------+---------------------------------------------------------------------------------------+| id                                   | name | mac_address       | fixed_ips                                                                             |+--------------------------------------+------+-------------------+---------------------------------------------------------------------------------------+| 68b347b5-0824-4880-9278-5d2c8ca3c819 |      | fa:16:3e:b4:98:70 | {"subnet_id": "7bf455ed-f912-4040-a6e9-7534a90193ff", "ip_address": "192.168.100.10"} || 64af3826-0ed1-4d6d-be6f-b4a8553b0cd7 |      | fa:16:3e:c4:b6:ab | {"subnet_id": "7bf455ed-f912-4040-a6e9-7534a90193ff", "ip_address": "192.168.100.11"} || 04ffc54d-ee1b-4bbc-87ab-c2fd3a226a5b |      | fa:16:3e:de:a7:04 | {"subnet_id": "7bf455ed-f912-4040-a6e9-7534a90193ff", "ip_address": "192.168.100.12"} || 724d4348-400f-42bb-842d-27b2b346b71a |      | fa:16:3e:ff:9c:25 | {"subnet_id": "76f8bbb0-52af-4b43-a246-679d6c456956", "ip_address": "192.168.104.2"}  || 190e2043-895c-47a7-a24d-edde72c2e9f1 |      | fa:16:3e:83:86:29 | {"subnet_id": "76f8bbb0-52af-4b43-a246-679d6c456956", "ip_address": "192.168.104.5"}  || 3b6acc83-5091-465c-aef2-d8f61fa9ee8f |      | fa:16:3e:20:54:52 | {"subnet_id": "76f8bbb0-52af-4b43-a246-679d6c456956", "ip_address": "192.168.104.6"}  || 9b25acd2-1f72-401c-b950-fccea4ec705e |      | fa:16:3e:49:9f:c0 | {"subnet_id": "1083770f-d719-43e3-b3c2-a3a0ba6cec0e", "ip_address": "192.168.105.2"}  || 17ac3436-4e65-43a2-aae9-98400b58db3a |      | fa:16:3e:f2:6d:1e | {"subnet_id": "1083770f-d719-43e3-b3c2-a3a0ba6cec0e", "ip_address": "192.168.105.3"}  || c3aa584d-100b-4552-b845-f1ade9f3a578 |      | fa:16:3e:96:88:9b | {"subnet_id": "1083770f-d719-43e3-b3c2-a3a0ba6cec0e", "ip_address": "192.168.105.4"}  || dc6ce9f9-79ea-4791-b8b3-82c1a8331d34 |      | fa:16:3e:04:66:11 | {"subnet_id": "df66e3aa-13ff-4dbb-84bb-20978da6f3f6", "ip_address": "192.168.108.2"}  || c4ad0e82-3095-4235-98d0-d37071b522c8 |      | fa:16:3e:39:e8:ef | {"subnet_id": "df66e3aa-13ff-4dbb-84bb-20978da6f3f6", "ip_address": "192.168.108.3"}  || 02bd9e7d-565c-4e1f-b18c-c10035dcf18c |      | fa:16:3e:23:3b:08 | {"subnet_id": "1083770f-d719-43e3-b3c2-a3a0ba6cec0e", "ip_address": "192.168.105.1"}  || c9a5f63e-b772-4860-9804-88807ad04205 |      | fa:16:3e:a2:83:02 | {"subnet_id": "df66e3aa-13ff-4dbb-84bb-20978da6f3f6", "ip_address": "192.168.108.1"}  || 800c1914-bf31-4103-bceb-44d85427d542 |      | fa:16:3e:6a:b8:ef | {"subnet_id": "58f9a8e5-35fc-4cdc-bb1b-5caf854041b1", "ip_address": "10.14.0.2"}      || 9601449b-1f5f-4c0c-bdef-6d4f2efe1add |      | fa:16:3e:3d:e4:3b | {"subnet_id": "58f9a8e5-35fc-4cdc-bb1b-5caf854041b1", "ip_address": "10.14.0.3"}      |+--------------------------------------+------+-------------------+---------------------------------------------------------------------------------------+

[root@controller ~]# neutron floatingip-associate a4ec7165-7233-4ef4-8795-98d7df9a01f1 c4ad0e82-3095-4235-98d0-d37071b522c8Associated floating IP a4ec7165-7233-4ef4-8795-98d7df9a01f1[root@controller ~]# neutron floatingip-list+--------------------------------------+------------------+---------------------+--------------------------------------+| id                                   | fixed_ip_address | floating_ip_address | port_id                              |+--------------------------------------+------------------+---------------------+--------------------------------------+| a4ec7165-7233-4ef4-8795-98d7df9a01f1 | 192.168.108.3    | 10.14.0.3           | c4ad0e82-3095-4235-98d0-d37071b522c8 |+--------------------------------------+------------------+---------------------+--------------------------------------+

这样在controller上就可以通过10.14.0.3和vlan里的vm进行通信。


0 0