信息安全仿真环境十二（1）

计算节点网络服务

• 主要配置

mv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bakvim /etc/neutron/neutron.conf[DEFAULT]
transport_url = rabbit://neutron:b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7@192.168.8.200
auth_strategy = keystone[keystone_authtoken]
www_authenticate_uri = http://192.168.8.200:5000
auth_url = http://192.168.8.200:5000
memcached_servers = 192.168.8.200:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7[oslo_concurrency]
lock_path = /var/lib/neutron/tmp

mv /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.bakvim /etc/neutron/plugins/ml2/ml2_conf.ini[DEFAULT]
core_plugin = ml2
transport_url = rabbit://neutron:b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7@192.168.8.200
auth_strategy = keystone[keystone_authtoken]
www_authenticate_uri = http://192.168.8.200:5000
auth_url = http://192.168.8.200:5000
memcached_servers = 192.168.8.200:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7

• OVS代理

mv /etc/neutron/plugins/ml2/openvswitch_agent.ini /etc/neutron/plugins/ml2/openvswitch_agent.ini.bakvim /etc/neutron/plugins/ml2/openvswitch_agent.ini[DEFAULT][agent]
tunnel_types = vxlan
l2_population = true
prevent_arp_spoofing = true[ovs]
local_ip = 192.168.8.201

chown -R neutron:neutron /etc/neutronecho "neutron ALL=(root) NOPASSWD: /usr/bin/privsep-helper *" >> /etc/sudoers.d/neutron

• 检查

systemctl restart neutron-openvswitch-agent openvswitch-switch
systemctl status neutron-openvswitch-agent openvswitch-switch
systemctl enable neutron-openvswitch-agent openvswitch-switchopenstack network agent list
# 计算节点的Open vSwitch agent