Step-by-Step Guide to Configure OpenStack Compute & Neutron Networking

Configure Kernel Network Parameters

vim /etc/sysctl.conf

net.ipv4.conf.all.rp_filter = 0

net.ipv4.conf.default.rp_filter = 0

sysctl -p

Install Required Packages

yum install openstack-neutron-ml2 openstack-neutron-openvswitch

Configure Keystone Authentication for Neutron

openstack-config --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone

openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_uri http://controller:5000

openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_host controller

openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_protocol http

openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_port 35357

openstack-config --set /etc/neutron/neutron.conf keystone_authtoken admin_tenant_name service

openstack-config --set /etc/neutron/neutron.conf keystone_authtoken admin_user neutron

openstack-config --set /etc/neutron/neutron.conf keystone_authtoken admin_password neutron

Configure Message Queue Backend

openstack-config --set /etc/neutron/neutron.conf DEFAULT rpc_backend neutron.openstack.common.rpc.impl_qpid

openstack-config --set /etc/neutron/neutron.conf DEFAULT qpid_hostname controller

Enable ML2 Plugin and Service Plugins

openstack-config --set /etc/neutron/neutron.conf DEFAULT core_plugin ml2

openstack-config --set /etc/neutron/neutron.conf DEFAULT service_plugins router

Configure ML2 Plugin Details

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_drivers gre

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types gre

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers openvswitch

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_gre tunnel_id_ranges 1:1000

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ovs local_ip 10.0.10.124

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ovs tunnel_type gre

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ovs enable_tunneling True

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup enable_security_group True

Start Open vSwitch Service

service openvswitch start

chkconfig openvswitch on

ovs-vsctl add-br br-int

Configure Compute to Use Neutron Networking

openstack-config --set /etc/nova/nova.conf DEFAULT network_api_class nova.network.neutronv2.api.API

openstack-config --set /etc/nova/nova.conf DEFAULT neutron_url http://controller:9696

openstack-config --set /etc/nova/nova.conf DEFAULT neutron_auth_strategy keystone

openstack-config --set /etc/nova/nova.conf DEFAULT neutron_admin_tenant_name service

openstack-config --set /etc/nova/nova.conf DEFAULT neutron_admin_username neutron

openstack-config --set /etc/nova/nova.conf DEFAULT neutron_admin_password neutron

openstack-config --set /etc/nova/nova.conf DEFAULT neutron_admin_auth_url http://controller:35357/v2.0

openstack-config --set /etc/nova/nova.conf DEFAULT linuxnet_interface_driver nova.network.linux_net.LinuxOVSInterfaceDriver

openstack-config --set /etc/nova/nova.conf DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver

openstack-config --set /etc/nova/nova.conf DEFAULT security_group_api neutron

Enable and Restart Services

cd /etc/neutron/

ln -s plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

cp /etc/init.d/neutron-openvswitch-agent /etc/init.d/neutron-openvswitch-agent.orig

sed -i 's,plugins/openvswitch/ovs_neutron_plugin.ini,plugin.ini,g' /etc/init.d/neutron-openvswitch-agent

service openstack-nova-compute restart

service neutron-openvswitch-agent start

chkconfig neutron-openvswitch-agent on

Create External Network on Controller

. admin-openrc.sh

neutron net-create ext-net --shared --router:external=True

Create Subnet for External Network

neutron subnet-create ext-net --name ext-subnet \

--allocation-pool start=172.16.20.12,end=172.16.20.61 \

--disable-dhcp --gateway 172.16.0.1 172.16.0.0/16

Create Tenant Network and Subnet

neutron net-create demo-net

neutron subnet-create demo-net --name demo-subnet \

--gateway 192.168.22.1 192.168.22.0/24

Create Router and Attach Networks

neutron router-create demo-router

neutron router-interface-add demo-router demo-subnet

neutron router-gateway-set demo-router ext-net

Install and Configure OpenStack Dashboard

yum install memcached python-memcached mod_wsgi openstack-dashboard

vim /etc/openstack-dashboard/local_settings

CACHES = {'default': {'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache','LOCATION': '127.0.0.1:11211',}}

ALLOWED_HOSTS = ['*', 'localhost']

OPENSTACK_HOST = "controller"

TIME_ZONE = "Asia/Shanghai"

Start Dashboard Services

service memcached start

service httpd start

chkconfig memcached on

chkconfig httpd on

Verification

Use the dashboard or CLI to view the network topology.