Kilo Neutron配置文件

kilo neutron配置文件 1.1 controller节点： 1.1.1：root@controller:~#cat /etc/neutron/neutron.conf

[DEFAULT] rpc_backend = rabbit auth_strategy = keystone service_plugins = router allow_overlapping_ips = True core_plugin = ml2 notify_nova_on_port_status_changes = True notify_nova_on_port_data_changes = True nova_url = http://controller:8774/v2 verbose = True [agent] root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf [keystone_authtoken] auth_uri = http://controller:5000 auth_url = http://controller:35357 auth_plugin = password project_domain_id = default user_domain_id = default project_name = service username = neutron password = Ch@123 [database] connection = mysql://neutron:Ch@123@controller/neutron [nova] auth_url = http://controller:35357 auth_plugin = password project_domain_id = default user_domain_id = default region_name = RegionOne project_name = service username = nova password = Ch@123 [oslo_concurrency] lock_path = $state_path/lock [oslo_messaging_rabbit] rabbit_host = controller rabbit_userid = openstack rabbit_password = Ch@123

1.1.2：root@controller:~# cat /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2] type_drivers = flat,vlan,gre,vxlan tenant_network_types = gre mechanism_drivers = openvswitch [ml2_type_flat] [ml2_type_vlan] [ml2_type_gre] tunnel_id_ranges = 123:1000 [ml2_type_vxlan] [securitygroup] enable_security_group = True enable_ipset = True firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

1.1.3： vi /etc/nova/nova.conf default段下面增加：

network_api_class = nova.network.neutronv2.api.API security_group_api = neutron linuxnet_interface_driver = nova.network.linux_net.LinuxOVSInterfaceDriver firewall_driver = nova.virt.firewall.NoopFirewallDriver

新增[neutron]段

[neutron] url = http://controller:9696 auth_strategy = keystone admin_auth_url = http://controller:35357/v2.0 admin_tenant_name = service admin_username = neutron admin_password = Ch@123 service_metadata_proxy = True metadata_proxy_shared_secret = Ch@123

1.2 network节点： 1.2.1 root@network:~# cat /etc/neutron/neutron.conf

[DEFAULT] auth_strategy = keystone rpc_backend = rabbit core_plugin = ml2 service_plugins = router allow_overlapping_ips = True verbose = True [agent] root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf [keystone_authtoken] auth_uri = http://controller:5000 auth_url = http://controller:35357 auth_plugin = password project_domain_id = default user_domain_id = default project_name = service username = neutron password = Ch@123 [oslo_concurrency] lock_path = $state_path/lock [oslo_messaging_rabbit] rabbit_host = controller rabbit_userid = openstack rabbit_password = Ch@123

1.2.2 root@network:~# cat /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2] type_drivers = flat,vlan,gre,vxlan tenant_network_types = gre mechanism_drivers = openvswitch [ml2_type_flat] flat_networks = external [ml2_type_vlan] [ml2_type_gre] tunnel_id_ranges = 123:1000 [ml2_type_vxlan] [securitygroup] enable_security_group = True enable_ipset = True firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver [ovs] local_ip = 10.127.138.154 bridge_mappings = external:br-ex [agent] tunnel_types = gre

1.2.3 root@network:~# cat /etc/neutron/l3_agent.ini

[DEFAULT] interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver external_network_bridge = router_delete_namespaces = True verbose = True

1.2.4root@network:~# cat /etc/neutron/dhcp_agent.ini

[DEFAULT] interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq dhcp_delete_namespaces = True verbose = True dnsmasq_config_file = /etc/neutron/dnsmasq-neutron.conf

1.2.5root@network:~# cat /etc/neutron/dnsmasq-neutron.conf

dhcp-option-force=26,1454

1.2.6root@network:~# cat /etc/neutron/metadata_agent.ini

[DEFAULT] auth_uri = http://controller:5000 auth_url = http://controller:35357 auth_region = RegionOne auth_plugin = password project_domain_id = default user_domain_id = default project_name = service username = neutron password = Ch@123 verbose = True nova_metadata_ip = controller metadata_proxy_shared_secret = Ch@123

1.2.7 执行ovs-vsctl add-port br-ex eth0之前必须： 将eth0的IP挪到br-ex上，同事修改br-ex的mac，将它修改为eth0的mac，eth0的mac改为其它，我的network节点的eth0的IP是10.127.138.154，mac是fa:16:3e:4e:e7:d7;下面的命令要连续执行，否则会断网；

ovs-vsctl add-br br-ex && ifconfig eth0 0 && ip link set br-ex up && ovs-vsctl add-port br-ex eth0 && ifconfig br-ex 10.127.138.154 netmask 255.255.255.0 && route add default gw 10.127.138.1 br-ex && ifconfig eth0 hw ether fa:16:3e:4e:e7:d8 && ifconfig br-ex hw ether fa:16:3e:4e:e7:d7

1.3 compute节点： 1.3.1 root@compute1:~# cat /etc/neutron/neutron.conf

[DEFAULT] core_plugin = ml2 service_plugins = router allow_overlapping_ips = True rpc_backend = rabbit auth_strategy = keystone verbose = True [agent] root_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf [keystone_authtoken] auth_uri = http://controller:5000 auth_url = http://controller:35357 auth_plugin = password project_domain_id = default user_domain_id = default project_name = service username = neutron password = Ch@123 [nova] [oslo_concurrency] lock_path = $state_path/lock [oslo_messaging_rabbit] rabbit_host = controller rabbit_userid = openstack rabbit_password = Ch@123

1.3.2 root@compute1:~# cat /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2] type_drivers = flat,vlan,gre,vxlan tenant_network_types = gre mechanism_drivers = openvswitch [ml2_type_flat] [ml2_type_vlan] [ml2_type_gre] tunnel_id_ranges = 123:1000 [ml2_type_vxlan] [securitygroup] enable_security_group = True enable_ipset = True firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver [ovs] local_ip = 10.127.138.131 [agent] tunnel_types = gre

1.3.3 root@compute1:~# vi /etc/nova/nova.conf [default]下面新增：

network_api_class = nova.network.neutronv2.api.API security_group_api = neutron linuxnet_interface_driver = nova.network.linux_net.LinuxOVSInterfaceDriver firewall_driver = nova.virt.firewall.NoopFirewallDriver

新增段落[neutron]：

[neutron] url = http://controller:9696 auth_strategy = keystone admin_auth_url = http://controller:35357/v2.0 admin_tenant_name = service admin_username = neutron admin_password = Ch@123

1.3.4 配置compute2，通compute1，仅IP修改