――先决条件
1.）创建数据库
MariaDB [(none)]> CREATE DATABASE neutron;Query OK, 1 row affected (0.00 sec)
MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';
Query OK, 0 rows affected (0.00 sec)
2.）Create the neutron user
[root@openstack ~]# openstack user create --domain default --password neutron_passwd neutron +-----------+----------------------------------+| Field | Value |+-----------+----------------------------------+| domain_id | 0b741c2e67ed4d618fa7e963325221ad || enabled | True || id | b6865118c01c4c3e8e9958e4ce1500ac || name | neutron |+-----------+----------------------------------+
3.）Add the admin role to the neutron user
[root@openstack ~]# openstack role add --project service --user neutron admin
4.）Create the neutron service entity
[root@openstack ~]# openstack service create --name neutron --description "OpenStack Networking" network+-------------+----------------------------------+| Field | Value |+-------------+----------------------------------+| description | OpenStack Networking || enabled | True || id | 2e7acf6189e24db6ba3899ec386f3740 || name | neutron || type | network |+-------------+----------------------------------+
5.）Create the Networking service API endpoints
[root@openstack ~]# openstack endpoint create --region RegionOne network public http://192.168.100.120:9696+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | caa517449be64a2fb5d7706484862da0 || interface | public || region | RegionOne || region_id | RegionOne || service_id | 2e7acf6189e24db6ba3899ec386f3740 || service_name | neutron || service_type | network || url | http://192.168.100.120:9696 |+--------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne network internal http://192.168.100.120:9696+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | dcdcbfa94ddd427ab9e7ade919e0e12a || interface | internal || region | RegionOne || region_id | RegionOne || service_id | 2e7acf6189e24db6ba3899ec386f3740 || service_name | neutron || service_type | network || url | http://192.168.100.120:9696 |+--------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne network admin http://192.168.100.120:9696+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | 75d36bd9c18647a28229ba1e9c78c802 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | 2e7acf6189e24db6ba3899ec386f3740 || service_name | neutron || service_type | network || url | http://192.168.100.120:9696 |+--------------+----------------------------------+
――控制节点neutron服务搭建配置
6.）安装neutron服务
[root@openstack ~]# yum -y install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables
7.）配置neutron服务
7.1）配置neutron.conf
[root@openstack ~]# cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak[root@openstack ~]# vim /etc/neutron/neutron.conf 1: [DEFAULT] 27: auth_strategy = keystone 30: core_plugin = ml2 33: service_plugins = router 121: allow_overlapping_ips = True 137: notify_nova_on_port_status_changes = true 141: notify_nova_on_port_data_changes = true 348: debug = true 516: rpc_backend = rabbit 658: [database] 689: connection = mysql://neutron:neutron@localhost:3306/neutron 766: [keystone_authtoken] 767: auth_uri = http://192.168.100.120:5000 768: auth_url = http://192.168.100.120:35357 769: memcached_servers = 192.168.100.120:11211 770: auth_type = password 771: project_domain_name = default 772: user_domain_name = default 773: project_name = service 774: username = neutron 775: password = neutron_passwd 943: [nova] 944: auth_url = http://192.168.100.120:35357 945: auth_type = password 946: project_domain_name = default 947: user_domain_name = default 948: region_name = RegionOne 949: project_name = service 950: username = nova 951: password = nova_passwd1065: lock_path = $state_path/lock1161: [oslo_messaging_rabbit]1216: rabbit_host = 192.168.100.1201222: rabbit_port = 56721234: rabbit_userid = openstack1238: rabbit_password = 11111111
7.2）配置ML2
[root@openstack ~]# cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak[root@openstack ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini 1: [DEFAULT] 9: debug = true127: [linux_bridge]138: physical_interface_mappings = provider:eth0144: [securitygroup]151: firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver156: enable_security_group = true163: [vxlan]171: enable_vxlan = true188: local_ip = 192.168.100.120192：l2_population = true
7.4）配置Layer-3(L3)agent
[root@openstack ~]# cp /etc/neutron/l3_agent.ini /etc/neutron/l3_agent.ini.bak[root@openstack ~]# vim /etc/neutron/l3_agent.ini 1: [DEFAULT] 23: interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver107: external_network_bridge = 159: debug = true
7.5）配置dhcp agent
[root@openstack ~]# cp /etc/neutron/dhcp_agent.ini /etc/neutron/dhcp_agent.ini.bak[root@openstack ~]# vim /etc/neutron/dhcp_agent.ini 1: [DEFAULT] 23: interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver 39: dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq 48: enable_isolated_metadata = true111: debug = true
7.6）配置metadata agent
[root@openstack ~]# cp /etc/neutron/metadata_agent.ini /etc/neutron/metadata_agent.ini.bak[root@openstack ~]# vim /etc/neutron/metadata_agent.ini 1: [DEFAULT]22: nova_metadata_ip = 192.168.100.12034: metadata_proxy_shared_secret = metadata_select76: debug = true
7.7）配置nova
[root@openstack ~]# vim /etc/nova/nova.conf 4136: [neutron]4137: url = http://192.168.100.120:96964138: auth_url = http://192.168.100.120:353574139: auth_type = password4140: project_domain_name = default4141: user_domain_name = default4142: region_name = RegionOne4143: project_name = service4144: username = neutron4145: password = neutron_passwd4153: service_metadata_proxy=true4156: metadata_proxy_shared_secret = metadata_select
8.）Finalize installation
[root@openstack ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini[root@openstack ~]# neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head
9.) Restart the Compute API service
[root@openstack ~]# systemctl restart openstack-nova-api.service[root@openstack ~]# systemctl status openstack-nova-api.service
10.) Start the Networking services
[root@openstack ~]# systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service[root@openstack ~]# systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service[root@openstack ~]# systemctl status neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
10.1) Start the layer-3 service
[root@openstack ~]# systemctl enable neutron-l3-agent.service[root@openstack ~]# systemctl start neutron-l3-agent.service[root@openstack ~]# systemctl status neutron-l3-agent.service
――计算节点neutron服务搭建配置
1.) 安装neutron服务
[root@openstack-client ~]# yum -y install openstack-neutron-linuxbridge ebtables ipset
2.) 配置neutron服务
2.1）配置neutron
[root@OpenStack-Compute ~]# cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak[root@OpenStack-Compute ~]# vim /etc/neutron/neutron.conf 1: [DEFAULT] 9: state_path = /var/lib/neutron 27: auth_strategy = keystone 348: debug = true 516: rpc_backend = rabbit 766: [keystone_authtoken] 767: auth_uri = http://192.168.100.120:5000 768: auth_url = http://192.168.100.120:35357 769: memcached_servers = 192.168.100.120:11211 770: auth_type = password 771: project_domain_name = default 772: user_domain_name = default 773: project_name = service 774: username = neutron 775: password = neutron_passwd1057: lock_path = $state_path/lock1153: [oslo_messaging_rabbit]1208: rabbit_host = 192.168.100.1201214: rabbit_port = 56721226: rabbit_userid = openstack1230: rabbit_password = 11111111
2.2）配置bridge agent
[root@OpenStack-Compute ~]# cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak[root@OpenStack-Compute ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini 1: [DEFAULT] 9: debug = true127: [linux_bridge]138: physical_interface_mappings = provider:eth0144: [securitygroup]151: firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver156: enable_security_group = true163: [vxlan]171: enable_vxlan = true188: local_ip = 192.168.100.121192: l2_population = true
2.3）配置nova
[root@OpenStack-Compute ~]# vim /etc/nova/nova.conf4136: [neutron]4137: url = http://192.168.100.120:96964138: auth_url = http://192.168.100.120:353574139: auth_type = password4140: project_domain_name = default4141: user_domain_name = default4142: region_name = RegionOne4143: project_name = service4144: username = neutron4145: password = neutron_passwd
3.）restart nova-compute service
[root@OpenStack-Compute ~]# systemctl restart openstack-nova-compute.service[root@OpenStack-Compute ~]# systemctl status openstack-nova-compute.service
4.）start bridge agent service
[root@OpenStack-Compute ~]# systemctl enable neutron-linuxbridge-agent.service[root@OpenStack-Compute ~]# systemctl start neutron-linuxbridge-agent.service[root@OpenStack-Compute ~]# systemctl status neutron-linuxbridge-agent.service
5.）在控制节点校验操作
[root@openstack ~]# . admin-openrc[root@openstack ~]# neutron ext-list+---------------------------+-----------------------------------------------+| alias | name |+---------------------------+-----------------------------------------------+| default-subnetpools | Default Subnetpools || network-ip-availability | Network IP Availability || network_availability_zone | Network Availability Zone || auto-allocated-topology | Auto Allocated Topology Services || ext-gw-mode | Neutron L3 Configurable external gateway mode || binding | Port Binding || agent | agent || subnet_allocation | Subnet Allocation || l3_agent_scheduler | L3 Agent Scheduler || tag | Tag support || external-net | Neutron external network || net-mtu | Network MTU || availability_zone | Availability Zone || quotas | Quota management support || l3-ha | HA Router extension || provider | Provider Network || multi-provider | Multi Provider Network || address-scope | Address scope || extraroute | Neutron Extra Route || timestamp_core | Time Stamp Fields addition for core resources || router | Neutron L3 Router || extra_dhcp_opt | Neutron Extra DHCP opts || dns-integration | DNS Integration || security-group | security-group || dhcp_agent_scheduler | DHCP Agent Scheduler || router_availability_zone | Router Availability Zone || rbac-policies | RBAC Policies || standard-attr-description | standard-attr-description || port-security | Port Security || allowed-address-pairs | Allowed Address Pairs || dvr | Distributed Virtual Router |+---------------------------+-----------------------------------------------+[root@openstack ~]# neutron agent-list+--------------------------------------+--------------------+--------------------+-------------------+-------+----------------+---------------------------+| id | agent_type | host | availability_zone | alive | admin_state_up | binary |+--------------------------------------+--------------------+--------------------+-------------------+-------+----------------+---------------------------+| 0ab75503-266e-41e6-938f-8660c1c581c8 | L3 agent | openstack | nova | :-) | True | neutron-l3-agent || 13ff8a61-1f8b-4bd7-b560-54f9011f0660 | DHCP agent | openstack | nova | :-) | True | neutron-dhcp-agent || 5eba5556-f85a-4e55-9166-0fd90d43e571 | Metadata agent | openstack | | :-) | True | neutron-metadata-agent || 7b0e1dd7-79d2-415a-a09a-c50f5f9adb72 | Linux bridge agent | openstack | | :-) | True | neutron-linuxbridge-agent || c014cb9e-de89-4b74-910a-7eba75a57507 | Linux bridge agent | OpenStack-Computee | | :-) | True | neutron-linuxbridge-agent |+--------------------------------------+--------------------+--------------------+-------------------+-------+----------------+---------------------------+
本文出自 “命运.” 博客，请务必保留此出处http://hypocritical.blog.51cto.com/3388028/1789264