六、OpenStack 安装 Neutron-2

在Network 节点

# nano /etc/sysctl.conf

net.ipv4.ip_forward=1
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0
net.bridge.bridge-nf-call-arptables=1
net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables=1

# sysctl -p

# apt-get install neutron-plugin-ml2 neutron-plugin-openvswitch-agent openvswitch-datapath-dkms neutron-l3-agent neutron-dhcp-agent

# nano /etc/neutron/neutron.conf

[DEFAULT]
...

verbose = True

rpc_backend = neutron.openstack.common.rpc.impl_kombu
rabbit_host = controller
rabbit_password = openstack

auth_strategy = keystone

core_plugin = ml2

service_plugins = router

allow_overlapping_ips = True

[keystone_authtoken]
auth_host = controller
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = neutron
admin_password = openstack

# nano /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]
...
type_drivers = flat,gre
tenant_network_types = gre
mechanism_drivers = openvswitch

[ml2_type_flat]
...
flat_networks = external

[ml2_type_gre]
...
tunnel_id_ranges = 1:1000

[securitygroup]
...
enable_security_group = True
enable_ipset = True
firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

[ovs]
local_ip = 10.20.20.12
enable_tunneling = True
bridge_mappings = external:br-ex

[agent]
tunnel_types = gre

# nano /etc/neutron/l3_agent.ini

[DEFAULT]
...

verbose = True

interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
use_namespaces = True
external_network_bridge = br-ex
router_delete_namespaces = True

# nano /etc/neutron/dhcp_agent.ini

verbose = True

interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
use_namespaces = True
dhcp_delete_namespaces = True

# nano /etc/neutron/metadata_agent.ini

[DEFAULT]
...

verbose = True

auth_url = http://controller:5000/v2.0
auth_region = regionOne
admin_tenant_name = service
admin_user = neutron
admin_password = openstack
...
nova_metadata_ip = controller
...
metadata_proxy_shared_secret = openstack

在 Controller 节点

# nano /etc/nova/nova.conf

[neutron]
...
service_metadata_proxy = True
metadata_proxy_shared_secret = openstack

# service nova-api restart

在Network 节点

# service openvswitch-switch restart

# ovs-vsctl add-br br-ex

# ovs-vsctl add-port br-ex eth2

# service neutron-plugin-openvswitch-agent restart
# service neutron-l3-agent restart
# service neutron-dhcp-agent restart
# service neutron-metadata-agent restart