Jump To Close Expand all Collapse all Table of contents Networking Guide Preface 1. Networking overview Expand section "1. Networking overview" Collapse section "1. Networking overview" 1.1. How networking works Expand section "1.1. How networking works" Collapse section "1.1. How networking works" 1.1.1. VLANs 1.2. Connecting two LANs together Expand section "1.2. Connecting two LANs together" Collapse section "1.2. Connecting two LANs together" 1.2.1. Firewalls 1.3. Working with OpenStack Networking (neutron) 1.4. Working with CIDR format 2. OpenStack networking concepts Expand section "2. OpenStack networking concepts" Collapse section "2. OpenStack networking concepts" 2.1. Installing OpenStack Networking (neutron) 2.2. OpenStack Networking diagram 2.3. Security groups 2.4. Open vSwitch 2.5. Modular layer 2 (ML2) networking Expand section "2.5. Modular layer 2 (ML2) networking" Collapse section "2.5. Modular layer 2 (ML2) networking" 2.5.1. The reasoning behind ML2 2.5.2. ML2 network types 2.5.3. ML2 mechanism drivers 2.6. ML2 type and mechanism driver compatibility 2.7. Limits of the ML2/OVN mechanism driver Expand section "2.7. Limits of the ML2/OVN mechanism driver" Collapse section "2.7. Limits of the ML2/OVN mechanism driver" 2.7.1. No supported ML2/OVS to ML2/OVN migration method in this release 2.7.2. ML2/OVS features not yet supported by ML2/OVN 2.8. Using the ML2/OVS mechanism driver instead of the default ML2/OVN driver Expand section "2.8. Using the ML2/OVS mechanism driver instead of the default ML2/OVN driver" Collapse section "2.8. Using the ML2/OVS mechanism driver instead of the default ML2/OVN driver" 2.8.1. Using ML2/OVS in a new RHOSP 16.0 deployment 2.8.2. Upgrading from ML2/OVS in a previous RHOSP to ML2/OVS in RHOSP 16.0 2.9. Configuring the L2 population driver 2.10. OpenStack Networking services Expand section "2.10. OpenStack Networking services" Collapse section "2.10. OpenStack Networking services" 2.10.1. L3 agent 2.10.2. DHCP agent 2.10.3. Open vSwitch agent 2.11. Project and provider networks Expand section "2.11. Project and provider networks" Collapse section "2.11. Project and provider networks" 2.11.1. Project networks 2.11.2. Provider networks Expand section "2.11.2. Provider networks" Collapse section "2.11.2. Provider networks" 2.11.2.1. Flat provider networks 2.11.2.2. Configuring networking for Controller nodes 2.11.2.3. Configuring networking for the Network and Compute nodes 2.11.2.4. Configuring the Network node 2.12. Layer 2 and layer 3 networking Expand section "2.12. Layer 2 and layer 3 networking" Collapse section "2.12. Layer 2 and layer 3 networking" 2.12.1. Use switching where possible I. Common Tasks Expand section "I. Common Tasks" Collapse section "I. Common Tasks" 3. Common administrative networking tasks Expand section "3. Common administrative networking tasks" Collapse section "3. Common administrative networking tasks" 3.1. Creating a network 3.2. Creating an advanced network 3.3. Adding network routing 3.4. Deleting a network 3.5. Purging the networking for a project 3.6. Working with subnets Expand section "3.6. Working with subnets" Collapse section "3.6. Working with subnets" 3.6.1. Creating a subnet 3.7. Deleting a subnet 3.8. Adding a router 3.9. Deleting a router 3.10. Adding an interface 3.11. Deleting an interface 3.12. Configuring IP addressing Expand section "3.12. Configuring IP addressing" Collapse section "3.12. Configuring IP addressing" 3.12.1. Creating floating IP pools 3.12.2. Assigning a specific floating IP 3.12.3. Assigning a random floating IP 3.13. Creating multiple floating IP pools 3.14. Bridging the physical network 4. Planning IP address usage Expand section "4. Planning IP address usage" Collapse section "4. Planning IP address usage" 4.1. VLAN planning 4.2. Types of network traffic 4.3. IP address consumption 4.4. Virtual networking 4.5. Example network plan 5. Reviewing OpenStack Networking router ports Expand section "5. Reviewing OpenStack Networking router ports" Collapse section "5. Reviewing OpenStack Networking router ports" 5.1. Viewing current port status 6. Troubleshooting provider networks Expand section "6. Troubleshooting provider networks" Collapse section "6. Troubleshooting provider networks" 6.1. Basic ping testing 6.2. Troubleshooting VLAN networks Expand section "6.2. Troubleshooting VLAN networks" Collapse section "6.2. Troubleshooting VLAN networks" 6.2.1. Reviewing the VLAN configuration and log files 6.3. Troubleshooting from within project networks Expand section "6.3. Troubleshooting from within project networks" Collapse section "6.3. Troubleshooting from within project networks" 6.3.1. Performing advanced ICMP testing within the namespace 7. Connecting an instance to the physical network Expand section "7. Connecting an instance to the physical network" Collapse section "7. Connecting an instance to the physical network" 7.1. Overview of the OpenStack Networking topology Expand section "7.1. Overview of the OpenStack Networking topology" Collapse section "7.1. Overview of the OpenStack Networking topology" 7.1.1. Service placement 7.2. Using flat provider networks Expand section "7.2. Using flat provider networks" Collapse section "7.2. Using flat provider networks" 7.2.1. Configuring the Controller nodes 7.2.2. Configuring the Network node and Compute nodes 7.2.3. Configuring the Network node 7.2.4. Connecting an instance to the external network 7.2.5. How does the flat provider network packet flow work? 7.2.6. Troubleshooting instance-physical network connections on flat provider networks 7.3. Using VLAN provider networks Expand section "7.3. Using VLAN provider networks" Collapse section "7.3. Using VLAN provider networks" 7.3.1. Configuring the Controller nodes 7.3.2. Configuring the Network and Compute nodes 7.3.3. Configuring the Network node 7.3.4. How does the VLAN provider network packet flow work? 7.3.5. Troubleshooting instance-physical network connections on VLAN provider networks 7.4. Enabling Compute metadata access 7.5. Floating IP addresses 8. Configuring physical switches for OpenStack Networking Expand section "8. Configuring physical switches for OpenStack Networking" Collapse section "8. Configuring physical switches for OpenStack Networking" 8.1. Planning your physical network environment 8.2. Configuring a Cisco Catalyst switch Expand section "8.2. Configuring a Cisco Catalyst switch" Collapse section "8.2. Configuring a Cisco Catalyst switch" 8.2.1. About trunk ports 8.2.2. Configuring trunk ports for a Cisco Catalyst switch 8.2.3. About access ports 8.2.4. Configuring access ports for a Cisco Catalyst switch 8.2.5. About LACP port aggregation 8.2.6. Configuring LACP on the physical NIC 8.2.7. Configuring LACP for a Cisco Catalyst switch 8.2.8. About MTU settings 8.2.9. Configuring MTU settings for a Cisco Catalyst switch 8.2.10. About LLDP discovery 8.2.11. Configuring LLDP for a Cisco Catalyst switch 8.3. Configuring a Cisco Nexus switch Expand section "8.3. Configuring a Cisco Nexus switch" Collapse section "8.3. Configuring a Cisco Nexus switch" 8.3.1. About trunk ports 8.3.2. Configuring trunk ports for a Cisco Nexus switch 8.3.3. About access ports 8.3.4. Configuring access ports for a Cisco Nexus switch 8.3.5. About LACP port aggregation 8.3.6. Configuring LACP on the physical NIC 8.3.7. Configuring LACP for a Cisco Nexus switch 8.3.8. About MTU settings 8.3.9. Configuring MTU settings for a Cisco Nexus 7000 switch 8.3.10. About LLDP discovery 8.3.11. Configuring LLDP for a Cisco Nexus 7000 switch 8.4. Configuring a Cumulus Linux switch Expand section "8.4. Configuring a Cumulus Linux switch" Collapse section "8.4. Configuring a Cumulus Linux switch" 8.4.1. About trunk ports 8.4.2. Configuring trunk ports for a Cumulus Linux switch 8.4.3. About access ports 8.4.4. Configuring access ports for a Cumulus Linux switch 8.4.5. About LACP port aggregation 8.4.6. About MTU settings 8.4.7. Configuring MTU settings for a Cumulus Linux switch 8.4.8. About LLDP discovery 8.4.9. Configuring LLDP for a Cumulus Linux switch 8.5. Configuring a Extreme Exos switch Expand section "8.5. Configuring a Extreme Exos switch" Collapse section "8.5. Configuring a Extreme Exos switch" 8.5.1. About trunk ports 8.5.2. Configuring trunk ports on an Extreme Networks EXOS switch 8.5.3. About access ports 8.5.4. Configuring access ports for an Extreme Networks EXOS switch 8.5.5. About LACP port aggregation 8.5.6. Configuring LACP on the physical NIC 8.5.7. Configuring LACP on an Extreme Networks EXOS switch 8.5.8. About MTU settings 8.5.9. Configuring MTU settings on an Extreme Networks EXOS switch 8.5.10. About LLDP discovery 8.5.11. Configuring LLDP settings on an Extreme Networks EXOS switch 8.6. Configuring a Juniper EX Series switch Expand section "8.6. Configuring a Juniper EX Series switch" Collapse section "8.6. Configuring a Juniper EX Series switch" 8.6.1. About trunk ports 8.6.2. Configuring trunk ports for a Juniper EX Series switch 8.6.3. About access ports 8.6.4. Configuring access ports for a Juniper EX Series switch 8.6.5. About LACP port aggregation 8.6.6. Configuring LACP on the physical NIC 8.6.7. Configuring LACP for a Juniper EX Series switch 8.6.8. About MTU settings 8.6.9. Configuring MTU settings for a Juniper EX Series switch 8.6.10. About LLDP discovery 8.6.11. Configuring LLDP for a Juniper EX Series switch II. Advanced Configuration Expand section "II. Advanced Configuration" Collapse section "II. Advanced Configuration" 9. Configure maximum transmission unit (MTU) settings Expand section "9. Configure maximum transmission unit (MTU) settings" Collapse section "9. Configure maximum transmission unit (MTU) settings" 9.1. MTU overview 9.2. Configuring MTU Settings in Director 9.3. Reviewing the resulting MTU calculation 10. Configuring Quality of Service (QoS) policies Expand section "10. Configuring Quality of Service (QoS) policies" Collapse section "10. Configuring Quality of Service (QoS) policies" 10.1. QoS rules 10.2. Creating and applying a QoS policy and rule Expand section "10.2. Creating and applying a QoS policy and rule" Collapse section "10.2. Creating and applying a QoS policy and rule" 10.2.1. Creating and applying a bandwidth limit QoS policy and rule 10.2.2. Creating and applying a guaranteed minimum bandwidth QoS policy and rule 10.2.3. DSCP marking for egress traffic 10.2.4. How to verify the application of your QoS policy and rules 10.3. RBAC for QoS Policies 11. Configuring bridge mappings Expand section "11. Configuring bridge mappings" Collapse section "11. Configuring bridge mappings" 11.1. Overview of bridge mappings 11.2. Traffic flow 11.3. Configuring bridge mappings 11.4. Maintaining bridge mappings for OVS Expand section "11.4. Maintaining bridge mappings for OVS" Collapse section "11.4. Maintaining bridge mappings for OVS" 11.4.1. Cleaning up OVS patch ports manually 11.4.2. Cleaning up OVS patch ports automatically 12. VLAN-aware instances Expand section "12. VLAN-aware instances" Collapse section "12. VLAN-aware instances" 12.1. Overview of VLAN-aware instances 12.2. Reviewing the trunk plug-in 12.3. Creating a trunk connection 12.4. Adding subports to the trunk 12.5. Configuring an instance to use a trunk 12.6. Understanding trunk states 13. Configuring RBAC policies Expand section "13. Configuring RBAC policies" Collapse section "13. Configuring RBAC policies" 13.1. Overview of RBAC policies 13.2. Creating RBAC policies 13.3. Reviewing RBAC policies 13.4. Deleting RBAC policies 13.5. Granting RBAC policy access for external networks 14. Configuring distributed virtual routing (DVR) Expand section "14. Configuring distributed virtual routing (DVR)" Collapse section "14. Configuring distributed virtual routing (DVR)" 14.1. Understanding distributed virtual routing (DVR) Expand section "14.1. Understanding distributed virtual routing (DVR)" Collapse section "14.1. Understanding distributed virtual routing (DVR)" 14.1.1. Overview of Layer 3 routing 14.1.2. Routing flows 14.1.3. Centralized routing 14.2. DVR overview 14.3. DVR known issues and caveats 14.4. Supported routing architectures 14.5. Deploying DVR with ML2 OVS 14.6. Migrating centralized routers to distributed routing 15. Load Balancing-as-a-Service (LBaaS) with Octavia Expand section "15. Load Balancing-as-a-Service (LBaaS) with Octavia" Collapse section "15. Load Balancing-as-a-Service (LBaaS) with Octavia" 15.1. Overview of Octavia 15.2. Octavia software requirements 15.3. Prerequisites for the undercloud Expand section "15.3. Prerequisites for the undercloud" Collapse section "15.3. Prerequisites for the undercloud" 15.3.1. Octavia feature support matrix 15.4. Planning your Octavia deployment Expand section "15.4. Planning your Octavia deployment" Collapse section "15.4. Planning your Octavia deployment" 15.4.1. Configuring Octavia certificates and keys 15.5. Deploying Octavia 15.6. Changing Octavia default settings 15.7. Secure a load balancer with an access control list 15.8. Configuring an HTTP load balancer 15.9. Verifying the load balancer 15.10. Overview of TLS-terminated HTTPS load balancer 15.11. Creating a TLS-terminated HTTPS load balancer 15.12. Creating a TLS-terminated HTTPS load balancer with SNI 15.13. Creating HTTP and TLS-terminated HTTPS load balancers on the same back end 15.14. Accessing Amphora logs 15.15. Updating running amphora instances Expand section "15.15. Updating running amphora instances" Collapse section "15.15. Updating running amphora instances" 15.15.1. Overview 15.15.2. Prerequisites 15.15.3. Update amphora instances with new images 16. Tenant networking with IPv6 Expand section "16. Tenant networking with IPv6" Collapse section "16. Tenant networking with IPv6" 16.1. Overview of project networking 16.2. IPv6 subnet options 16.3. Create an IPv6 subnet using Stateful DHCPv6 17. Managing project quotas Expand section "17. Managing project quotas" Collapse section "17. Managing project quotas" 17.1. Configuring project quotas 17.2. L3 quota options 17.3. Firewall quota options 17.4. Security group quota options 17.5. Management quota options 18. Configuring allowed-address-pairs Expand section "18. Configuring allowed-address-pairs" Collapse section "18. Configuring allowed-address-pairs" 18.1. Overview of allowed-address-pairs 18.2. Creating a port and allowing one address pair 18.3. Adding allowed-address-pairs 19. Configuring Layer 3 high availability (HA) Expand section "19. Configuring Layer 3 high availability (HA)" Collapse section "19. Configuring Layer 3 high availability (HA)" 19.1. OpenStack Networking without high availability (HA) 19.2. Overview of Layer 3 high availability (HA) 19.3. Layer 3 high availability (HA) failover conditions 19.4. Project considerations for Layer 3 high availability (HA) 19.5. High availability (HA) changes to OpenStack Networking 19.6. Enabling Layer 3 high availability (HA) on OpenStack Networking nodes 19.7. Reviewing high availability (HA) node configurations 20. Identifying virtual devices with tags Expand section "20. Identifying virtual devices with tags" Collapse section "20. Identifying virtual devices with tags" 20.1. Overview of virtual device tagging 20.2. Tagging virtual devices Legal Notice Settings Close Language: 日本語 English Language: 日本語 English Format: Multi-page Single-page PDF Format: Multi-page Single-page PDF Language and Page Formatting Options Language: 日本語 English Language: 日本語 English Format: Multi-page Single-page PDF Format: Multi-page Single-page PDF Part I. Common Tasks Covers common administrative tasks and basic troubleshooting steps. Previous Next