#本文采取的selfservice network 请知晓！
在控制节点操作
[root@controller ~]# . admin-openstack.sh
创建一个provider 网络
[root@controller ~]# openstack network create --share --external \
> --provider-physical-network provider \
> --provider-network-type flat provider
+---------------------------+--------------------------------------+
| Field | Value |
+---------------------------+--------------------------------------+
| admin_state_up | UP |
| availability_zone_hints | |
| availability_zones | |
| created_at | 2018-03-27T05:06:16Z |
| description | |
| dns_domain | None |
| id | 3f56acb3-8909-4547-a3fa-cc8fa5335cc4 |
| ipv4_address_scope | None |
| ipv6_address_scope | None |
| is_default | False |
| is_vlan_transparent | None |
| mtu | 1500 |
| name | provider |
| port_security_enabled | True |
| project_id | ff092630a87740e599d79861b144c845 |
| provider:network_type | flat |
| provider:physical_network | provider |
| provider:segmentation_id | None |
| qos_policy_id | None |
| revision_number | 5 |
| router:external | External |
| segments | None |
| shared | True |
| status | ACTIVE |
| subnets | |
| tags | |
| updated_at | 2018-03-27T05:06:16Z |
+---------------------------+--------------------------------------+创建一个子网
[root@controller ~]# openstack subnet create --network provider --allocation-pool start=10.10.6.101,end=10.10.6.130 --dns-nameserver 114.114.114.114 --gateway 10.10.0.252 --subnet-range 10.10.0.0/16 provider
+-------------------+--------------------------------------+
| Field | Value |
+-------------------+--------------------------------------+
| allocation_pools | 10.10.6.101-10.10.6.130 |
| cidr | 10.10.0.0/16 |
| created_at | 2018-03-27T05:09:19Z |
| description | |
| dns_nameservers | 114.114.114.114 |
| enable_dhcp | True |
| gateway_ip | 10.10.0.252 |
| host_routes | |
| id | e24845af-9d0c-4c81-882d-dbc0244f8a23 |
| ip_version | 4 |
| ipv6_address_mode | None |
| ipv6_ra_mode | None |
| name | provider |
| network_id | 3f56acb3-8909-4547-a3fa-cc8fa5335cc4 |
| project_id | ff092630a87740e599d79861b144c845 |
| revision_number | 0 |
| segment_id | None |
| service_types | |
| subnetpool_id | None |
| tags | |
| updated_at | 2018-03-27T05:09:19Z |
+-------------------+--------------------------------------+创建一个selfservice 网络
[root@controller ~]# openstack network create selfservice
+---------------------------+--------------------------------------+
| Field | Value |
+---------------------------+--------------------------------------+
| admin_state_up | UP |
| availability_zone_hints | |
| availability_zones | |
| created_at | 2018-03-27T04:58:43Z |
| description | |
| dns_domain | None |
| id | 85e6486d-08fb-4540-8f8f-54b0deb567ab |
| ipv4_address_scope | None |
| ipv6_address_scope | None |
| is_default | False |
| is_vlan_transparent | None |
| mtu | 1450 |
| name | selfservice |
| port_security_enabled | True |
| project_id | ff092630a87740e599d79861b144c845 |
| provider:network_type | vxlan |
| provider:physical_network | None |
| provider:segmentation_id | 84 |
| qos_policy_id | None |
| revision_number | 2 |
| router:external | Internal |
| segments | None |
| shared | False |
| status | ACTIVE |
| subnets | |
| tags | |
| updated_at | 2018-03-27T04:58:43Z |
+---------------------------+--------------------------------------+创建子网
[root@controller ~]# openstack subnet create --network selfservice --dns-nameserver 114.114.114.114 --gateway 172.16.1.1 --subnet-range 172.16.1.0/24 selfservice
+-------------------+--------------------------------------+
| Field | Value |
+-------------------+--------------------------------------+
| allocation_pools | 172.16.1.2-172.16.1.254 |
| cidr | 172.16.1.0/24 |
| created_at | 2018-03-27T05:00:37Z |
| description | |
| dns_nameservers | 114.114.114.114 |
| enable_dhcp | True |
| gateway_ip | 172.16.1.1 |
| host_routes | |
| id | ad094995-48c2-4a63-b549-3b6119584ebf |
| ip_version | 4 |
| ipv6_address_mode | None |
| ipv6_ra_mode | None |
| name | selfservice |
| network_id | 85e6486d-08fb-4540-8f8f-54b0deb567ab |
| project_id | ff092630a87740e599d79861b144c845 |
| revision_number | 0 |
| segment_id | None |
| service_types | |
| subnetpool_id | None |
| tags | |
| updated_at | 2018-03-27T05:00:37Z |
+-------------------+--------------------------------------+创建一个路由
[root@controller ~]# openstack router create router
+-------------------------+--------------------------------------+
| Field | Value |
+-------------------------+--------------------------------------+
| admin_state_up | UP |
| availability_zone_hints | |
| availability_zones | |
| created_at | 2018-03-27T05:01:29Z |
| description | |
| distributed | False |
| external_gateway_info | None |
| flavor_id | None |
| ha | False |
| id | c89ed00d-bb9e-4ff0-b78d-ea24f2e260a6 |
| name | router |
| project_id | ff092630a87740e599d79861b144c845 |
| revision_number | 1 |
| routes | |
| status | ACTIVE |
| tags | |
| updated_at | 2018-03-27T05:01:29Z |
+-------------------------+--------------------------------------+把selfservice 创建路由
[root@controller ~]# neutron router-interface-add router selfservice
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Added interface 51d36c25-ff6b-49da-9d41-69457ad9788b to router router
设置网关
[root@controller ~]# neutron router-gateway-set router provider
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
Set gateway for router router确认设置
[root@controller ~]# ip netns
qdhcp-3f56acb3-8909-4547-a3fa-cc8fa5335cc4 (id: 2)
qrouter-c89ed00d-bb9e-4ff0-b78d-ea24f2e260a6 (id: 1)
qdhcp-85e6486d-08fb-4540-8f8f-54b0deb567ab (id: 0)
[root@controller ~]# neutron router-port-list router
neutron CLI is deprecated and will be removed in the future. Use openstack CLI instead.
+--------------------------------------+------+----------------------------------+-------------------+------------------------------------------------------------------------------------+
| id | name | tenant_id | mac_address | fixed_ips |
+--------------------------------------+------+----------------------------------+-------------------+------------------------------------------------------------------------------------+
| 51d36c25-ff6b-49da-9d41-69457ad9788b | | ff092630a87740e599d79861b144c845 | fa:16:3e:a2:c9:6a | {"subnet_id": "ad094995-48c2-4a63-b549-3b6119584ebf", "ip_address": "172.16.1.1"} |
| deff6458-a542-4632-9334-c9afd4bac03d | | | fa:16:3e:e9:85:a1 | {"subnet_id": "e24845af-9d0c-4c81-882d-dbc0244f8a23", "ip_address": "10.10.6.109"} |
+--------------------------------------+------+----------------------------------+-------------------+------------------------------------------------------------------------------------+在控制而节点ping provider 的网关是否通
[root@controller ~]# ping 10.10.6.109 -c 2
PING 10.10.6.109 (10.10.6.109) 56(84) bytes of data.
64 bytes from 10.10.6.109: icmp_seq=1 ttl=64 time=0.531 ms
64 bytes from 10.10.6.109: icmp_seq=2 ttl=64 time=0.478 ms创建实例模板
[root@controller ~]# openstack flavor create --id 0 --vcpus 1 --ram 64 --disk 1 m1.nano
+----------------------------+---------+
| Field | Value |
+----------------------------+---------+
| OS-FLV-DISABLED:disabled | False |
| OS-FLV-EXT-DATA:ephemeral | 0 |
| disk | 1 |
| id | 0 |
| name | m1.nano |
| os-flavor-access:is_public | True |
| properties | |
| ram | 64 |
| rxtx_factor | 1.0 |
| swap | |
| vcpus | 1 |
+----------------------------+---------+查看镜像
[root@controller ~]# openstack image list
+--------------------------------------+--------+--------+
| ID | Name | Status |
+--------------------------------------+--------+--------+
| 188515c1-c203-46d3-b2a1-88cbb8a70a44 | cirros | active |
+--------------------------------------+--------+--------+创建安全规则
[root@controller ~]# openstack security group rule create --proto icmp default
[root@controller ~]# openstack security group rule create --proto tcp --dst-port 22 default
[root@controller ~]# openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey
+-------------+-------------------------------------------------+
| Field | Value |
+-------------+-------------------------------------------------+
| fingerprint | 52:b1:47:9e:c9:63:65:59:96:2a:02:71:08:38:d5:40 |
| name | mykey |
| user_id | 9eaf7fdcfc4446c58bca578611ebce9f |
+-------------+-------------------------------------------------+
确认网络信息
[root@controller ~]# openstack network list
+--------------------------------------+-------------+--------------------------------------+
| ID | Name | Subnets |
+--------------------------------------+-------------+--------------------------------------+
| 3f56acb3-8909-4547-a3fa-cc8fa5335cc4 | provider | e24845af-9d0c-4c81-882d-dbc0244f8a23 |
| 85e6486d-08fb-4540-8f8f-54b0deb567ab | selfservice | ad094995-48c2-4a63-b549-3b6119584ebf |
+--------------------------------------+-------------+--------------------------------------+启动一个实例
[root@controller ~]# nova boot --flavor m1.nano --image cirros --nic net-id=85e6486d-08fb-4540-8f8f-54b0deb567ab --security-group default --key-name mykey --availability-zone nova kvm01-cirros
+--------------------------------------+-----------------------------------------------+
| Property | Value |
+--------------------------------------+-----------------------------------------------+
| OS-DCF:diskConfig | MANUAL |
| OS-EXT-AZ:availability_zone | nova |
| OS-EXT-SRV-ATTR:host | - |
| OS-EXT-SRV-ATTR:hostname | kvm01-cirros |
| OS-EXT-SRV-ATTR:hypervisor_hostname | - |
| OS-EXT-SRV-ATTR:instance_name | |
| OS-EXT-SRV-ATTR:kernel_id | |
| OS-EXT-SRV-ATTR:launch_index | 0 |
| OS-EXT-SRV-ATTR:ramdisk_id | |
| OS-EXT-SRV-ATTR:reservation_id | r-rjh8ldzz |
| OS-EXT-SRV-ATTR:root_device_name | - |
| OS-EXT-SRV-ATTR:user_data | - |
| OS-EXT-STS:power_state | 0 |
| OS-EXT-STS:task_state | scheduling |
| OS-EXT-STS:vm_state | building |
| OS-SRV-USG:launched_at | - |
| OS-SRV-USG:terminated_at | - |
| accessIPv4 | |
| accessIPv6 | |
| adminPass | fFeNxfkK7yZB |
| config_drive | |
| created | 2018-03-27T05:46:32Z |
| description | - |
| flavor:disk | 1 |
| flavor:ephemeral | 0 |
| flavor:extra_specs | {} |
| flavor:original_name | m1.nano |
| flavor:ram | 64 |
| flavor:swap | 0 |
| flavor:vcpus | 1 |
| hostId | |
| host_status | |
| id | 11ad548f-e606-421e-85b7-6c81e99f8e3c |
| image | cirros (188515c1-c203-46d3-b2a1-88cbb8a70a44) |
| key_name | mykey |
| locked | False |
| metadata | {} |
| name | kvm01-cirros |
| os-extended-volumes:volumes_attached | [] |
| progress | 0 |
| security_groups | default |
| status | BUILD |
| tags | [] |
| tenant_id | ff092630a87740e599d79861b144c845 |
| updated | 2018-03-27T05:46:39Z |
| user_id | 9eaf7fdcfc4446c58bca578611ebce9f |
+--------------------------------------+-----------------------------------------------+在compute2 查看虚拟机状态
[root@compute12 ~]# virsh list --all
Id Name State
----------------------------------------------------
1 instance-00000001 running
[root@compute12 ~]#登录dashboard设置flouting ip和安全规则，开通ssh 和icmp 端口，在终端进行查看
[root@controller ~]# nova list
+--------------------------------------+------+--------+------------+-------------+-------------------------------------+
| ID | Name | Status | Task State | Power State | Networks |
+--------------------------------------+------+--------+------------+-------------+-------------------------------------+
| c543c102-c4ca-487f-b749-967468c02405 | kvm1 | ACTIVE | - | Running | selfservice=172.16.1.8, 10.10.6.110 |
+--------------------------------------+------+--------+------------+-------------+-------------------------------------+在控制节点ping flouting 是否通
[root@controller ~]# ping 10.10.6.110
PING 10.10.6.110 (10.10.6.110) 56(84) bytes of data.
64 bytes from 10.10.6.110: icmp_seq=1 ttl=63 time=4.88 ms
64 bytes from 10.10.6.110: icmp_seq=2 ttl=63 time=2.12 ms
^C
--- 10.10.6.110 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 2.124/3.506/4.889/1.383 ms
登录进去
[root@controller ~]# ssh cirros@10.10.6.110
The authenticity of host '10.10.6.110 (10.10.6.110)' can't be established.
RSA key fingerprint is SHA256:lhg+oJyAoMXFiu9XK0TAtGyYqn+m37Xg7AFYRHivH9Y.
RSA key fingerprint is MD5:18:07:be:97:f1:5c:87:22:45:1a:7f:8a:69:56:74:a3.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.10.6.110' (RSA) to the list of known hosts.
cirros@10.10.6.110's password:
Permission denied, please try again.
cirros@10.10.6.110's password: cubswin:)
$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc pfifo_fast qlen 1000
link/ether fa:16:3e:09:c7:ac brd ff:ff:ff:ff:ff:ff
inet 172.16.1.8/24 brd 172.16.1.255 scope global eth0
inet6 fe80::f816:3eff:fe09:c7ac/64 scope link
valid_lft forever preferred_lft forever
$ ping baidu.com
PING baidu.com (220.181.57.216): 56 data bytes
64 bytes from 220.181.57.216: seq=0 ttl=51 time=7.004 ms
64 bytes from 220.181.57.216: seq=1 ttl=51 time=4.861 ms
^C
--- baidu.com ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 4.861/5.932/7.004 ms本文参考官网：https://docs.openstack.org/install-guide/launch-instance.html
332
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
