1. 安装neutron-linuxbridge
[root@compute01 ~]# yum install openstack-neutron-linuxbridge ebtables ipset -y
2. 配置neutron.conf
[root@compute01 ~]# egrep -v "^$|^#" /etc/neutron/neutron.conf
[DEFAULT]
bind_host = 10.100.214.205
transport_url = rabbit://openstack:huayun@10.100.214.200
auth_strategy = keystone
[cors]
[database]
[keystone_authtoken]
www_authenticate_uri = http://10.100.214.200:5000
auth_url = http://10.100.214.200:5000
memcached_servers = 10.100.214.201:11211,10.100.214.203:11211,10.100.214.203:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = huayun
[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_middleware]
[oslo_policy]
[privsep]
[ssl]
[root@compute01 ~]# scp /etc/neutron/neutron.conf 10.100.214.207:/etc/neutron/
[root@compute01 ~]# scp /etc/neutron/neutron.conf 10.100.214.206:/etc/neutron/
3. 配置linuxbridge_agent.ini
1）配置linuxbridgr_agent.ini
[root@compute01 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[root@compute01 ~]# egrep -v "^#|^$" /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[DEFAULT]
[linux_bridge]
physical_interface_mappings = external:ens224,vlan:ens256
[vxlan]
enable_vxlan = true
local_ip = 115.115.115.205
l2_population = true
[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
[root@compute01 ~]# scp /etc/neutron/plugins/ml2/linuxbridge_agent.ini 10.100.214.206:/etc/neutron/plugins/ml2/linuxbridge_agent.ini
[root@compute01 ~]# scp /etc/neutron/plugins/ml2/linuxbridge_agent.ini 10.100.214.207:/etc/neutron/plugins/ml2/linuxbridge_agent.ini
2）配置内核参数
[root@compute01 ~]# echo "net.bridge.bridge-nf-call-iptables = 1" >> /etc/sysctl.conf
[root@compute01 ~]# echo "net.bridge.bridge-nf-call-ip6tables = 1" >> /etc/sysctl.conf
[root@compute01 ~]# modprobe br_netfilter
[root@compute01 ~]# sysctl -p
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1
4. 配置nova.conf
# 在全部计算节点操作，以compute01节点为例； # 配置只涉及nova.conf的”[neutron]”字段
[neutron]
url = http://10.100.214.200:9696
auth_url = http://10.100.214.200:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = huayun
service_metadata_proxy = true
metadata_proxy_shared_secret = huayun
5. 启动服务
[root@compute01 ~]# systemctl restart openstack-nova-compute.service
[root@compute01 ~]# systemctl enable neutron-linuxbridge-agent.service
[root@compute01 ~]# systemctl start neutron-linuxbridge-agent.service
6. 验证
[root@controller01 ~]# openstack network agent list
