openstak安装（30）

启动实例

创建虚拟网络

在创建私有项目网络前，必须创建创建公共网络(在启动实例前，必须创建必要的虚拟网络设施。对网络选择1，实例通过layer-2（桥接/交换）使用连接到物理网络设施的公共提供虚拟网络。这个网络包括一个为实例提供IP地址的DHCP服务。admin或者其他权限用户必须创建这个网络，因为它直接连接到物理网络设施。)

创建公共网络

[root@controller ~]# source admin-openrc.sh #加载 admin 凭证来获取管理员能执行的命令访问权限

[root@controller ~]# neutron net-create public --shared --provider:physical_network public --provider:network_type flat #创建网络

Created a new network:

+---------------------------+--------------------------------------+

| Field | Value |

+---------------------------+--------------------------------------+

| admin_state_up | True |

| id | 5fc60cce-0943-4844-b9e2-c768af2ea302 |

| mtu | 0 |

| name | public |

| port_security_enabled | True |

| provider:network_type | flat |

| provider:physical_network | public |

| provider:segmentation_id | |

| router:external | False |

| shared | True |

| status | ACTIVE |

| subnets | |

| tenant_id | e5f65d198e594c9f8a8db29a6a9d01a7 |

+---------------------------+--------------------------------------+

[root@controller ~]# neutron subnet-create public 192.168.1.0/24 --name public --allocation-pool start=192.168.1.220,end=192.168.1.250 --dns-nameserver 114.114.114.114 --gateway 192.168.1.1 #在网络上创建一个子网

Created a new subnet:

+-------------------+----------------------------------------------------+

| Field | Value |

+-------------------+----------------------------------------------------+

| allocation_pools | {"start": "192.168.1.220", "end": "192.168.1.250"} |

| cidr | 192.168.1.0/24 |

| dns_nameservers | 192.168.1.1 |

| enable_dhcp | True |

| gateway_ip | 192.168.1.1 |

| host_routes | |

| id | ac92ba15-daef-4bc3-a353-ed1325c85844 |

| ip_version | 4 |

| ipv6_address_mode | |

| ipv6_ra_mode | |

| name | public |

| network_id | 5fc60cce-0943-4844-b9e2-c768af2ea302 |

| subnetpool_id | |

| tenant_id | e5f65d198e594c9f8a8db29a6a9d01a7 |

+-------------------+----------------------------------------------------+

创建私有项目网络

[root@controller ~]# source demo-openrc.sh #加载 demo 凭证来获取管理员能执行的命令访问权限

[root@controller ~]# neutron net-create private #创建网络 非特权用户一般不能在这个命令制定更多参数

Created a new network:

+-----------------------+--------------------------------------+

| Field | Value |

+-----------------------+--------------------------------------+

| admin_state_up | True |

| id | ce8a6c38-5a84-47c0-b058-9bdd8b67e179 |

| mtu | 0 |

| name | private |

| port_security_enabled | True |

| router:external | False |

| shared | False |

| status | ACTIVE |

| subnets | |

| tenant_id | a152b2b891a147dfa3068d66311ad0c3 |

+-----------------------+--------------------------------------+

[root@controller ~]# neutron subnet-create private172.16.1.0/24 --name private --dns-nameserver 114.114.114.114 --gateway 172.16.1.1 #在网络上创建一个子网

Created a new subnet:

+-------------------+------------------------------------------------+

| Field | Value |

+-------------------+------------------------------------------------+

| allocation_pools | {"start": "172.16.1.2", "end": "172.16.1.254"} |

| cidr | 172.16.1.0/24 |

| dns_nameservers | 114.114.114.114 |

| enable_dhcp | True |

| gateway_ip | 172.16.1.1 |

| host_routes | |

| id | 91f26704-6ead-4d73-870e-115dd8377998 |

| ip_version | 4 |

| ipv6_address_mode | |

| ipv6_ra_mode | |

| name | private |

| network_id | ce8a6c38-5a84-47c0-b058-9bdd8b67e179 |

| subnetpool_id | |

| tenant_id | a152b2b891a147dfa3068d66311ad0c3 |

+-------------------+------------------------------------------------+

创建路由器

[root@controller ~]# source admin-openrc.sh #获得 admin 凭证来获取只有管理员能执行的命令的访问权限

[root@controller ~]# neutron net-update public --router:external #添加router: external到 public 网络

Updated network: public

[root@controller ~]# source demo-openrc.sh #加载 demo 凭证获得用户能执行的命令访问权限

[root@controller ~]# neutron router-create router #创建路由

Created a new router:

+-----------------------+--------------------------------------+

| Field | Value |

+-----------------------+--------------------------------------+

| admin_state_up | True |

| external_gateway_info | |

| id | 649c8cfc-e117-4105-b55d-cd9214792ae3 |

| name | router |

| routes | |

| status | ACTIVE |

| tenant_id | a152b2b891a147dfa3068d66311ad0c3 |

+-----------------------+--------------------------------------+

[root@controller ~]# neutron router-interface-add router private #在路由器添加一个私网子网接口

Added interface65404353-b387-4243-81b8-a2cbeb5b6b4d to router router.

[root@controller ~]# neutron router-gateway-set router public #在路由器上设置公共网络的网关

Set gateway for router router