手动安装liberty版本openstack环境（allinone）---安装neutron

作者：【吴业亮】云计算开发工程师
博客：http://blog.csdn.net/wylfengyujiancheng
1、创建neutron数据库

# mysql -uroot -pChangeme_123 -e "CREATE DATABASE neutron;"

注意：Changeme_123为数据库root密码
2、创建数据库用户并赋予权限

# mysql -uroot -pChangeme_123 -e "GRANT ALL PRIVILEGES ON neutron.* TO  \
'neutron'@'localhost' IDENTIFIED BY 'Changeme_123';" 
# mysql -uroot -pChangeme_123 -e "GRANT ALL PRIVILEGES ON neutron.* TO \ 
'neutron'@'%' IDENTIFIED BY 'Changeme_123';" 

注意：将Changeme_123替换为自己的密码
3、创建neutron用户及赋予admin权限

# openstack user create neutron  --password Changeme_123
# openstack role add --project service --user neutron admin

注意：将Changeme_123替换为自己的密码
4、创建network服务

# openstack service create --name neutron --description "OpenStack Networking" network

5、创建endpoint

# openstack endpoint create --region RegionOne   network public http://${HOSTNAME}:9696  
# openstack endpoint create --region RegionOne   network internal http://${HOSTNAME}:9696 
# openstack endpoint create --region RegionOne   network admin http://${HOSTNAME}:9696

6、安装neutron相关软件

# yum install openstack-neutron openstack-neutron-ml2   openstack-neutron-linuxbridge python-neutronclient -y

7、配置neutron配置文件/etc/neutron/neutron.conf

# openstack-config --set  /etc/neutron/neutron.conf database connection  mysql://neutron:Changeme_123@${HOSTNAME}/neutron 
# openstack-config --set  /etc/neutron/neutron.conf DEFAULT core_plugin  ml2  
# openstack-config --set  /etc/neutron/neutron.conf DEFAULT service_plugins  router  
# openstack-config --set  /etc/neutron/neutron.conf DEFAULT allow_overlapping_ips  True  
# openstack-config --set  /etc/neutron/neutron.conf DEFAULT rpc_backend  rabbit  
# openstack-config --set  /etc/neutron/neutron.conf oslo_messaging_rabbit rabbit_host  ${HOSTNAME}  
# openstack-config --set  /etc/neutron/neutron.conf oslo_messaging_rabbit rabbit_userid  openstack  
# openstack-config --set  /etc/neutron/neutron.conf oslo_messaging_rabbit rabbit_password  Changeme_123  
# openstack-config --set  /etc/neutron/neutron.conf DEFAULT auth_strategy  keystone  
# openstack-config --set  /etc/neutron/neutron.conf keystone_authtoken auth_uri  http://${HOSTNAME}:5000  
# openstack-config --set  /etc/neutron/neutron.conf keystone_authtoken auth_url  http://${HOSTNAME}:35357  
# openstack-config --set  /etc/neutron/neutron.conf keystone_authtoken auth_plugin  password  
# openstack-config --set  /etc/neutron/neutron.conf keystone_authtoken project_domain_id  default  
# openstack-config --set  /etc/neutron/neutron.conf keystone_authtoken user_domain_id  default  
# openstack-config --set  /etc/neutron/neutron.conf keystone_authtoken project_name  service  
# openstack-config --set  /etc/neutron/neutron.conf keystone_authtoken username  neutron  
# openstack-config --set  /etc/neutron/neutron.conf keystone_authtoken password  Changeme_123  
# openstack-config --set  /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_status_changes  True  
# openstack-config --set  /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_data_changes  True  
# openstack-config --set  /etc/neutron/neutron.conf DEFAULT nova_url  http://${HOSTNAME}:8774/v2  
# openstack-config --set  /etc/neutron/neutron.conf nova auth_url  http://${HOSTNAME}:35357  
# openstack-config --set  /etc/neutron/neutron.conf nova auth_plugin  password 
# openstack-config --set  /etc/neutron/neutron.conf nova project_domain_id  default  
# openstack-config --set  /etc/neutron/neutron.conf nova user_domain_id  default  
# openstack-config --set  /etc/neutron/neutron.conf nova region_name  RegionOne  
# openstack-config --set  /etc/neutron/neutron.conf nova project_name  service  
# openstack-config --set  /etc/neutron/neutron.conf nova username  nova  
# openstack-config --set  /etc/neutron/neutron.conf nova password  Changeme_123  
# openstack-config --set  /etc/neutron/neutron.conf oslo_concurrency lock_path  /var/lib/neutron/tmp  
# openstack-config --set  /etc/neutron/neutron.conf DEFAULT verbose  True

8、配置/etc/neutron/plugins/ml2/ml2_conf.

# openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_drivers  flat,vlan,vxlan 
# openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers  linuxbridge,l2population 
# openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2 extension_drivers  port_security 
# openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types  vxlan 
# openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_flat flat_networks  public 
# openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_vxlan vni_ranges  1:1000 
# openstack-config --set   /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup enable_ipset  True

9、配置/etc/neutron/plugins/ml2/linuxbridge_agent.ini。

# openstack-config --set   /etc/neutron/plugins/ml2/linuxbridge_agent.ini  linux_bridge physical_interface_mappings  public:ETH1_IP 
# openstack-config --set   /etc/neutron/plugins/ml2/linuxbridge_agent.ini  vxlan  enable_vxlan  True
# openstack-config --set   /etc/neutron/plugins/ml2/linuxbridge_agent.ini  vxlan  local_ip  ETH1_IP 
# openstack-config --set   /etc/neutron/plugins/ml2/linuxbridge_agent.ini  vxlan l2_population  True 
# openstack-config --set   /etc/neutron/plugins/ml2/linuxbridge_agent.ini agent  prevent_arp_spoofing  True
# openstack-config --set   /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup  enable_security_group  True 
# openstack-config --set   /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup  firewall_driver  neutron.agent.linux.iptables_firewall.IptablesFirewallDriver 

注意将ETH1_IP替换为eth1的IP。
10、配置 /etc/neutron/l3_agent.ini

# openstack-config --set  /etc/neutron/l3_agent.ini  DEFAULT     interface_driver  neutron.agent.linux.interface.BridgeInterfaceDriver 
# openstack-config --set   /etc/neutron/l3_agent.ini  DEFAULT     external_network_bridge   
# # openstack-config --set  /etc/neutron/l3_agent.ini  DEFAULT     verbose  True  

11、配置/etc/neutron/dhcp_agent.ini

# openstack-config --set  /etc/neutron/dhcp_agent.ini  DEFAULT     interface_driver  neutron.agent.linux.interface.BridgeInterfaceDriver    
# openstack-config --set  /etc/neutron/dhcp_agent.ini  DEFAULT     dhcp_driver  neutron.agent.linux.dhcp.Dnsmasq  
# openstack-config --set  /etc/neutron/dhcp_agent.ini  DEFAULT     enable_isolated_metadata  True  
# openstack-config --set  /etc/neutron/dhcp_agent.ini  DEFAULT     verbose  True  
# openstack-config --set  /etc/neutron/dhcp_agent.ini  DEFAULT     dnsmasq_config_file  /etc/neutron/dnsmasq-neutron.conf  
# openstack-config --set  /etc/neutron/dhcp_agent.ini  DEFAULT     interface_driver  neutron.agent.linux.interface.BridgeInterfaceDriver

12、将dhcp-option-force=26,1450写入/etc/neutron/dnsmasq-neutron.conf

# echo "dhcp-option-force=26,1450" >/etc/neutron/dnsmasq-neutron.conf

13、配置/etc/neutron/metadata_agent.ini

# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT auth_uri  http://${HOSTNAME}:5000 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT auth_url  http://${HOSTNAME}:35357 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT auth_region  RegionOne 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT auth_plugin  password 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT project_domain_id  default 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT user_domain_id  default 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT project_name  service 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT username  neutron 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT password  Changeme_123 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT nova_metadata_ip  ${HOSTNAME} 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT metadata_proxy_shared_secret  Changeme_123 
# openstack-config --set  /etc/neutron/metadata_agent.ini  DEFAULT verbose  True

14、配置/etc/nova/nova.conf

# openstack-config --set  /etc/nova/nova.conf  neutron url  http://${HOSTNAME}:9696 
# openstack-config --set  /etc/nova/nova.conf  neutron auth_url  http://${HOSTNAME}:35357 
# openstack-config --set  /etc/nova/nova.conf  neutron auth_plugin  password 
# openstack-config --set  /etc/nova/nova.conf  neutron project_domain_id  default 
# openstack-config --set  /etc/nova/nova.conf  neutron user_domain_id  default 
# openstack-config --set  /etc/nova/nova.conf  neutron region_name  RegionOne
# openstack-config --set  /etc/nova/nova.conf  neutron project_name service 
# openstack-config --set  /etc/nova/nova.conf  neutron username  neutron 
# openstack-config --set  /etc/nova/nova.conf  neutron password  Changeme_123 
# openstack-config --set  /etc/nova/nova.conf  neutron service_metadata_proxy  True 
# openstack-config --set  /etc/nova/nova.conf  neutron metadata_proxy_shared_secret  Changeme_123 

15、创建链接

#  ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

16、同步数据库

# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf   --config-file  \ 
/etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

17、重启nova服务

# systemctl restart openstack-nova-api.service

18、重启neutron服务并设置开机启动

# systemctl enable neutron-server.service   neutron-linuxbridge-agent.service \
 neutron-dhcp-agent.service   neutron-metadata-agent.service 
# systemctl start neutron-server.service   neutron-linuxbridge-agent.service  \
neutron-dhcp-agent.service   neutron-metadata-agent.service

19、启动neutron-l3-agent.service并设置开机启动

# systemctl enable neutron-l3-agent.service 
# systemctl start neutron-l3-agent.service

20、验证

# source /root/admin-openrc.sh
# neutron ext-list
# neutron agent-list

21、创建demo-key

# source /root/demo-openrc.sh
# nova keypair-add demo-key

22、设置安全组规则

# nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0
# nova secgroup-add-rule default tcp 22 22 0.0.0.0/0 

23、创建虚拟机外出网段

# source /root/admin-openrc.sh
# neutron net-create public --shared -- \
provider:physical_network public   --provider:network_type flat

24、创建public子网

# neutron subnet-create public 192.168.80.0/24 --name public   --allocation-pool  \
start=192.168.80.10,end=192.168.8.200   --dns-nameserver 8.8.8.8 --gateway 192.168.80.1

25、创建租户网络

# source /root/demo-openrc.sh
# neutron net-create private

26、创建租户网络子网

# neutron subnet-create private 10.10.10.0/24 --name private  \
 --dns-nameserver 8.8.8.8 --gateway 10.10.10.1

27、修改public为共享

# source /root/admin-openrc.sh
# neutron net-update public --router:external

28、创建路由器

# source /root/demo-openrc.sh
# neutron router-create router

29、将public和private网络绑定到路由器上

# neutron router-interface-add router private
# neutron router-gateway-set router public

30、验证

# source /root/admin-openrc.sh
# neutron router-port-list router