Configure the metadata agent

Networking Option 2: Self-service networks

yum install openstack-neutron openstack-neutron-ml2 \\ openstack-neutron-linuxbridgeebtables Configure the server component

1. Edit the /etc/neutron/neutron.conf file and complete the following actions: In the [database] section, configure database access:

[database] ... connection = mysql+pymysql://neutron:NEUTRON_DBPASS@controller/neutron In the [DEFAULT] section, enable the Modular Layer 2 (ML2) plug-in, router service, and overlapping IP addresses:

[DEFAULT] ... core_plugin = ml2 service_plugins = router allow_overlapping_ips = True In the [DEFAULT] section, configure RabbitMQ message queue access:

[DEFAULT] ... transport_url = rabbit://openstack:RABBIT_PASS@controller In the [DEFAULT] and [keystone_authtoken] sections, configure Identity service access:

[DEFAULT] ... auth_strategy = keystone [keystone_authtoken] ... auth_uri = http://controller:5000 auth_url = http://controller:35357 memcached_servers = controller:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = neutron password = NEUTRON_PASS In the [DEFAULT] and [nova] sections, configure Networking to notify Compute of network topology changes:

[DEFAULT] ... notify_nova_on_port_status_changes = True notify_nova_on_port_data_changes = True [nova] ... auth_url = http://controller:35357 auth_type = password project_domain_name = default user_domain_name = default

region_name = RegionOne project_name = service username = nova password = NOVA_PASS In the [oslo_concurrency] section, configure the lock path:

[oslo_concurrency] ... lock_path = /var/lib/neutron/tmp Configure the Modular Layer 2 (ML2) plug-in

1. Edit the /etc/neutron/plugins/ml2/ml2_conf.ini file and complete the following

actions:

In the [ml2] section, enable flat, VLAN, and VXLAN networks:

[ml2] ... type_drivers = flat,vlan,vxlan In the [ml2] section, enable VXLAN self-service networks:

[ml2] ... tenant_network_types = vxlan In the [ml2] section, enable the Linux bridge and layer-2 population mechanisms:

[ml2] ... mechanism_drivers = linuxbridge,l2population In the [ml2] section, enable the port security extension driver:

[ml2] ... extension_drivers = port_security In the [ml2_type_flat] section, configure the provider virtual network as a flat network:

[ml2_type_flat] ... flat_networks = provider In the [ml2_type_vxlan] section, configure the VXLAN network identifier range for self-service networks:

[ml2_type_vxlan] ... vni_ranges = 1:1000 In the [securitygroup] section, enable ipset to increase efficiency of security group rules:

[securitygroup] ... enable_ipset = True Configure the Linux bridge agent

Edit the /etc/neutron/plugins/ml2/linuxbridge_agent.ini file and complete the following actions:

In the [linux_bridge] section, map the provider virtual network to the provider physical network interface:

[linux_bridge] physical_interface_mappings=provider:eno33554984 In the [vxlan] section, enable VXLAN overlay networks, configure the IP address of the