http://docs.openstack.org/kilo/install-guide/install/yum/content/neutron_initial-external-network.html
External network
The external network typically provides Internet access for your instances. By default, this network only allows Internet access from instances using Network Address Translation (NAT). You can enable Internet access to individual instances using a floating IP address and suitable security group rules. Theadmin
tenant owns this network because it provides external network
access for multiple tenants.Note | |
---|---|
Perform these commands on the controller node. |
To create the external network
- Source the
admin
credentials to gain access to admin-only CLI commands:
$ source admin-openrc.sh
- Create the network:
$ neutron net-create ext-net --router:external \ --provider:physical_network external --provider:network_type flat Created a new network:
+---------------------------+--------------------------------------+ | Field | Value | +---------------------------+--------------------------------------+ | admin_state_up | True | | id | 08e02f01-fb15-46e0-8be5-0d5f0ccf7509 | | mtu | 0 | | name | ext-net | | provider:network_type | flat | | provider:physical_network | external | | provider:segmentation_id | | | router:external | True | | shared | False | | status | ACTIVE | | subnets | | | tenant_id | 9c1cc7fa7fc24c17812ec662555ba519 | +---------------------------+--------------------------------------+
To create a subnet on the external network
- Create the subnet:
$ neutron subnet-create ext-net
ReplaceEXTERNAL_NETWORK_CIDR
--name ext-subnet \ --allocation-pool start=FLOATING_IP_START
,end=FLOATING_IP_END
\ --disable-dhcp --gatewayEXTERNAL_NETWORK_GATEWAY
FLOATING_IP_START
andFLOATING_IP_END
with the first and last IP addresses of the range that you want to allocate for floating IP addresses. ReplaceEXTERNAL_NETWORK_CIDR
with the subnet associated with the physical network. ReplaceEXTERNAL_NETWORK_GATEWAY
with the gateway associated with the physical network, typically the ".1" IP address. You should disable DHCP on this subnet because instances do not connect directly to the external network and floating IP addresses require manual assignment.
For example, using203.0.113.0/24
with floating IP address range203.0.113.101
to203.0.113.200
:
# neutron subnet-create ext-net 203.0.113.0/24 --name ext-subnet \
--allocation-pool start=203.0.113.101,end=203.0.113.200 \ --disable-dhcp --gateway 203.0.113.1 Created a new subnet: +-------------------+----------------------------------------------------+ | Field | Value | +-------------------+----------------------------------------------------+ | allocation_pools | {"start": "203.0.113.101", "end": "203.0.113.200"} | | cidr | 203.0.113.0/24 | | dns_nameservers | | | enable_dhcp | False | | gateway_ip | 203.0.113.1 | | host_routes | | | id | 8225834a-15cf-442e-84f2-711ef762e39b | | ip_version | 4 | | ipv6_address_mode | | | ipv6_ra_mode | | | name | ext-subnet | | network_id | 08e02f01-fb15-46e0-8be5-0d5f0ccf7509 | | subnetpool_id | | | tenant_id | 9c1cc7fa7fc24c17812ec662555ba519 | +-------------------+----------------------------------------------------+
No comments:
Post a Comment