20260520 OVN网络整体实验

OVN网络整体实验[rootcontroller ~16:26:09]# source keystonerc_admin[rootcontroller ~(keystone_admin)]# openstack network agent list-------------------------------------------------------------------------------------------------------------------------------------|ID|Agent Type|Host|Availability Zone|Alive|State|Binary|-------------------------------------------------------------------------------------------------------------------------------------|627b03c2-1e62-4a49-b866-3645186cb9a3|OVN Controller agent|compute||:-)|UP|ovn-controller||b2230269-2469-56ad-84d7-7233b3d86efe|OVN Metadata agent|compute||:-)|UP|neutron-ovn-metadata-agent||8de57b53-2ba2-48c5-b9c8-cd01a3ae97d5|OVN Controller agent|controller||:-)|UP|ovn-controller||c28d8880-96b5-51a4-ac75-260470cd7c7d|OVN Metadata agent|controller||:-)|UP|neutron-ovn-metadata-agent|-------------------------------------------------------------------------------------------------------------------------------------确认配置[rootcontroller ~16:27:40]# vim /etc/neutron/plugins/ml2/ml2_conf.ini#按G跳到末尾[ml2]type_driversgeneve,flattenant_network_typesgenevemechanism_driversovnpath_mtu0extension_driversport_security,qos[securitygroup]enable_security_groupTrue[ml2_type_geneve]max_header_size38vni_ranges10:100[ml2_type_flat]flat_networks*[ovn]ovn_nb_connectiontcp:192.168.108.10:6641ovn_sb_connectiontcp:192.168.108.10:6642ovn_metadata_enabledTrue创建外部网络[rootcontroller ~17:00:52]# ovn-nbctl showswitch 804fa842-3bf9-4b51-bfee-0c2c8554f53f(neutron-d1d7ff3a-3d4a-4b86-95ed-600a42cb3111)(aka waiwang)port provnet-fc7c601d-1e5b-4564-b545-dc2c38a32500 type: localnet addresses:[unknown]port 49bfb91d-ea38-4587-a475-b38f8cc6e21d type: localport addresses:[fa:16:3e:6e:69:c2 192.168.108.100]创建内网neiwang-1,192.168.11.0/24[rootcontroller ~17:06:17]# ovn-nbctl showswitch 804fa842-3bf9-4b51-bfee-0c2c8554f53f(neutron-d1d7ff3a-3d4a-4b86-95ed-600a42cb3111)(aka waiwang)port provnet-fc7c601d-1e5b-4564-b545-dc2c38a32500 type: localnet addresses:[unknown]port 49bfb91d-ea38-4587-a475-b38f8cc6e21d type: localport addresses:[fa:16:3e:6e:69:c2 192.168.108.100]switch 0d15ec93-35c2-4d11-ba83-af6840a15ed8(neutron-5eb232a6-0a61-4d5c-aa42-fbb185a99d93)(aka neiwang-1)port 2dec2c7c-9110-4736-b449-600abaa47048 type: localport addresses:[fa:16:3e:9c:81:8a 192.168.11.2]创建路由器router1连接内网与外网[rootcontroller ~17:12:00]# ovn-nbctl showswitch 804fa842-3bf9-4b51-bfee-0c2c8554f53f(neutron-d1d7ff3a-3d4a-4b86-95ed-600a42cb3111)(aka waiwang)port provnet-fc7c601d-1e5b-4564-b545-dc2c38a32500 type: localnet addresses:[unknown]port 49bfb91d-ea38-4587-a475-b38f8cc6e21d type: localport addresses:[fa:16:3e:6e:69:c2 192.168.108.100]port 769061de-1f28-4e25-bb5a-e8045829e6b1 type: router router-port: lrp-769061de-1f28-4e25-bb5a-e8045829e6b1 switch 0d15ec93-35c2-4d11-ba83-af6840a15ed8(neutron-5eb232a6-0a61-4d5c-aa42-fbb185a99d93)(aka neiwang-1)port 2dec2c7c-9110-4736-b449-600abaa47048 type: localport addresses:[fa:16:3e:9c:81:8a 192.168.11.2]port 608c8e92-056b-4f7f-bc10-896bd125bde6 type: router router-port: lrp-608c8e92-056b-4f7f-bc10-896bd125bde6 router 170b42a0-ba12-4f93-a03f-6540811a7389(neutron-6b89d47c-ca24-46bd-9403-5dc78ccea9c3)(aka router1)port lrp-608c8e92-056b-4f7f-bc10-896bd125bde6 mac:fa:16:3e:54:2c:a4networks:[192.168.11.1/24]port lrp-769061de-1f28-4e25-bb5a-e8045829e6b1 mac:fa:16:3e:db:fd:c8networks:[192.168.108.131/24]gateway chassis:[8de57b53-2ba2-48c5-b9c8-cd01a3ae97d5]nat d1becc45-0252-4179-8d17-0a8898c6d280 external ip:192.168.108.131logical ip:192.168.11.0/24type:snat创建两实例绑到neiwang-1创建实例需要(镜像规格网络) 镜像 规格自定义网络使用neiwang-1[rootcontroller ~]# ovn-nbctl showswitch 9e269a0c-5049-4c20-b602-ce42d722017c(neutron-c5a25fa7-559f-4e62-8bf0- 7ebcd8c8a1f1)(aka neiwang-1)port 0e42719e-b450-4fbf-a222-be6402b2bb93 addresses:[fa:16:3e:33:e8:8b 192.168.11.4]port 9da6f7af-22e3-44fc-8465-90334f8abeea type: router router-port: lrp-9da6f7af-22e3-44fc-8465-90334f8abeea port 3ff7bcb4-c9be-4e6d-b14c-cff503adfae6 addresses:[fa:16:3e:bd:e5:c5 192.168.11.169]port 3b975511-7c63-495e-969c-1424e69770dc type: localport addresses:[fa:16:3e:dd:ea:9d 192.168.11.2]switch e69d7e37-9a0d-4abe-81c8-9d10c2246178(neutron-e79063ae-1291-42b2-8519- ec0ce0a421e1)(aka waiwang)port 43b284b0-ebc8-4bd3-8c59-77dcec8d33dd type: localport addresses:[fa:16:3e:be:d3:41 192.168.108.100]port c0354999-1e15-436f-b15f-be2d3b17c5b4 type: router router-port: lrp-c0354999-1e15-436f-b15f-be2d3b17c5b4 port provnet-50a84802-b570-4cad-be3e-cb934c259c48 type: localnet addresses:[unknown]router 9374d9e7-b8b0-4d6e-924d-c9fdef6662e5(neutron-a75adc8f-9668-4fe1-b6ebb4573d574ae0)(aka router1)port lrp-9da6f7af-22e3-44fc-8465-90334f8abeea mac:fa:16:3e:78:18:6cnetworks:[192.168.11.1/24]port lrp-c0354999-1e15-436f-b15f-be2d3b17c5b4 mac:fa:16:3e:82:b8:23networks:[192.168.108.185/24]gateway chassis:[46cd64c9-2f35-4dfb-9351-e0b1693daf8b]nat d6fae190-e948-475c-b5b1-a9258a8b7c65 external ip:192.168.108.185logical ip:192.168.11.0/24type:snat