Saturday, November 14, 2015

The Rosetta Stone

Will alter this config to fit my install

Example 2: HA + Neutron with GRE

As a model example, the following configuration is used:
  • Deploying mode: Multi-node HA
  • Networking model: Neutron with GRE
Hardware and environment:
  • 7 4 servers with two 1Gb/s ethernet NIC and IPMI
  • 1 Cisco Catalyst 3750 switch (2950 Switch)
  • Independent out of band management network for IPMI
  • Connection to the Internet or/and DC network via a router called Gateway and IP 172.16.1.1
Node servers roles
  • 1 server as Fuel Node (2G Dual Core)
  • 3 1 servers as Controller Node (8G Quad Core)
  • 1 server as Cinder Node (8G Quad Core)
  • 2 1 servers as Compute Node - (Dell 620 32G 8 core)
Network Configuration Plan:
  • Floating/Public network 172.16.0.0/24 in VLAN 100 (untagged on servers)
  • Floating IP range 172.16.0.130 - 254
  • Internal network (private) 192.168.111.0/24
  • Gateway 192.168.111.1
  • DNS 8.8.4.4, 8.8.8.8
  • Tunnel ID range 2 - 65535
  • Management network 192.168.0.0/24 in VLAN 101
  • Storage network 192.168.1.0/24 in VLAN 102
  • Administrative network (for Fuel) 10.20.0.0/24 in VLAN 103
Network Parameters
  • Fuel server: IP 10.20.0.2/24
  • Default gateway: 10.20.0.1
  • DNS: 10.20.0.1
Note
The Internet and rest of DC access via Public network (for OpenStack Nodes) and Administrative network (Fuel server).
From server side, ports with following VLAN IDs are used:
  • eth0 - Administrative VLAN 103 (untagged)
  • eth1 - Public/Floating VLAN 100 (untagged), Management VLAN 101 (tagged), Storage VLAN 102 (tagged)

Detailed port configuration

The following table describes port configuration for this deployment.
Switch PortServer nameServer NICtagged / untaggedVLAN ID
G0/1Fueleth0untagged103
G0/2Fueleth1untagged100
G0/3Compute Node 1eth0untagged103
G0/4Compute Node 1eth1tagged100(untagged), 101, 102
G0/5Compute Node neth0tagged103
G0/6Compute Node neth1tagged100(untagged), 101, 102
G0/7Controller Node 1eth0tagged103
G0/8Controller Node 1eth1tagged100(untagged), 101, 102
G0/9Controller Node 2eth0tagged103
G0/10Controller Node 2eth1tagged100(untagged), 101, 102
G0/11Controller Node 3eth0tagged103
G0/12Controller Node 3eth1tagged100(untagged), 101, 102
G0/13Cinder Nodeeth0tagged103
G0/14Cinder Nodeeth1tagged100(untagged), 101, 102
G0/24Router (default gateway)
untagged100

Neutron Switch configuration (Cisco Catalyst 2960G)

Use the following configuration to deploy Mirantis OpenStack using a Cisco Catalyst 2960G network switch.
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname OpenStack_sw1
!
logging count
logging buffered 64000 informational
logging rate-limit console 100 except errors
logging console informational
enable secret r00tme
!
username root privilege 15 secret r00tme
!
no aaa new-model
aaa session-id common
ip subnet-zero
ip domain-name domain.ltd
ip name-server [ip of domain name server]
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
!
vlan 100
name Public
vlan 101
name Management
vlan 102
name Storage
vlan 103
name Admin
!
interface GigabitEthernet0/1
 description Fuel Node eth0
 switchport access vlan 103
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/2
 description Fuel Node eth1 (optional to have direct access to Public net)
 switchport access vlan 100
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/3
 description Compute Node 1 eth0
 switchport access vlan 103
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/4
 description Compute Node 1 eth1
 switchport trunk native vlan 100
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100, 101 102
 switchport mode trunk
 spanning-tree portfast trunk
!
interface GigabitEthernet0/5
 description Compute Node 2 eth0
 switchport access vlan 103
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/6
 description Compute Node 2 eth1
 switchport trunk native vlan 100
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100, 101 102
 switchport mode trunk
 spanning-tree portfast trunk
!
interface GigabitEthernet0/7
 description Controller Node 1 eth0
 switchport access vlan 103
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/8
 description Controller Node 1 eth1
 switchport trunk native vlan 100
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100, 101 102
 switchport mode trunk
 spanning-tree portfast trunk
!
interface GigabitEthernet0/9
 description Controller Node 2 eth0
 switchport access vlan 103
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/10
 description Controller Node 2 eth1
 switchport trunk native vlan 100
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100, 101 102
 switchport mode trunk
 spanning-tree portfast trunk
!
interface GigabitEthernet0/11
 description Controller Node 3 eth0
 switchport access vlan 103
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/12
 description Controller Node 3 eth1
 switchport trunk native vlan 100
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100, 101 102
 switchport mode trunk
 spanning-tree portfast trunk
!
interface GigabitEthernet0/13
 description Cinder Node eth0
 switchport access vlan 103
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/14
 description Cinder Node eth1
 switchport trunk native vlan 100
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 100, 101 102
 switchport mode trunk
 spanning-tree portfast trunk
!
interface GigabitEthernet0/24
 description Connection to default gateway
 switchport access vlan 100
 switchport mode access
!
interface Vlan100
 ip address 172.16.1.254 255.255.255.0
 ip address 172.16.0.254 255.255.255.0 secondary
 no shutdown
!
ip route 0.0.0.0 0.0.0.0 172.16.1.1
!
ip classless
no ip http server
no ip http secure-server
!
line con 0
session-timeout 15
privilege level 15
login local
password r00tme
!
line vty 0 15
session-timeout 15
login local
password r00tme
!
ntp server [ntp_server1] prefer
ntp server [ntp_server2]

No comments: