Ubuntu 18.04
Sponsored Link

OpenStack Stein : Neutron ネットワークを構成 (VXLAN)2019/04/12

 
OpenStack Network Service(Neutron)による仮想ネットワークの構成です。
例として、VXLAN タイプのネットワークを構成します。
事前に以下のように Control ノードNetwork ノードCompute ノードの 各 Neutron サービスノードを構築済みであることが前提です。
また、当例では Network ノードが二つのネットワークインターフェースを持っているものとします。また、下例で eth1 の方は IP なしでインターフェースを UP しています。 IP なしでのインターフェース UP の設定はこちらの [1] を参照ください
------------+---------------------------+---------------------------+------------
            |                           |                           |
        eth0|10.0.0.30              eth0|10.0.0.50              eth0|10.0.0.51
+-----------+-----------+   +-----------+-----------+   +-----------+-----------+
|    [ Control Node ]   |   |    [ Network Node ]   |   |    [ Compute Node ]   |
|                       |   |                       |   |                       |
|  MariaDB    RabbitMQ  |   |        L2 Agent       |   |        Libvirt        |
|  Memcached  httpd     |   |        L3 Agent       |   |     Nova Compute      |
|  Keystone   Glance    |   |     Metadata Agent    |   |        L2 Agent       |
|  Nova API             |   |                       |   |                       |
|  Neutron Server       |   |                       |   |                       |
|  Metadata Agent       |   |                       |   |                       |
+-----------------------+   +-----------+-----------+   +-----------------------+
                                    eth1|(UP with no IP)

[1] Control ノードで以下のように設定変更します。
root@dlp ~(keystone)#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# 169行目: tenant_network_types に値を追記

tenant_network_types =
vxlan
# 220行目:追記

[ml2_type_flat]
flat_networks = physnet1
# 274行目:追記

[ml2_type_vxlan]
vni_ranges = 1:1000
root@dlp ~(keystone)#
systemctl restart neutron-server

[2] Network ノードで以下のように設定変更します。
root@network:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# 169行目: tenant_network_types に値を追記

tenant_network_types =
vxlan
# 220行目:追記

[ml2_type_flat]
flat_networks = physnet1
# 274行目:追記

[ml2_type_vxlan]
vni_ranges = 1:1000
root@network:~#
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
# 154行目:追記

[agent]
prevent_arp_spoofing = True
# 183行目:追記

[linux_bridge]
physical_interface_mappings = physnet1:eth1
# 239行目:追記

[vxlan]
enable_vxlan = True
root@network:~#
vi /etc/neutron/dhcp_agent.ini
# 74行目:追記

dnsmasq_config_file = /etc/neutron/dnsmasq-neutron.conf
root@network:~#
vi /etc/neutron/dnsmasq-neutron.conf
# 新規作成

dhcp-option-force=26,1450
root@network:~#
for service in l3-agent dhcp-agent metadata-agent linuxbridge-agent; do
systemctl restart neutron-$service
done

[3] Compute ノードで以下のように設定変更します。
root@node01:~#
vi /etc/neutron/plugins/ml2/ml2_conf.ini
# 169行目: tenant_network_types に値を追記

tenant_network_types =
vxlan
# 220行目:追記

[ml2_type_flat]
flat_networks = physnet1
# 274行目:追記

[ml2_type_vxlan]
vni_ranges = 1:1000
root@node01:~#
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
# 154行目:追記

[agent]
prevent_arp_spoofing = True
# 239行目:追記

[vxlan]
enable_vxlan = True
root@node01:~#
systemctl restart neutron-linuxbridge-agent

[4] 仮想ルータを作成します。作業場所はどこでもよいですが、当例では Control ノード上で作業します。
# 仮想ルーター作成

root@dlp ~(keystone)#
openstack router create router01

+-------------------------+-----------------------------------------------------------------------------------------------------+
| Field                   | Value                                                                                               |
+-------------------------+-----------------------------------------------------------------------------------------------------+
| admin_state_up          | UP                                                                                                  |
| availability_zone_hints |                                                                                                     |
| availability_zones      |                                                                                                     |
| created_at              | 2019-04-12T07:09:47Z                                                                                |
| description             |                                                                                                     |
| distributed             | False                                                                                               |
| external_gateway_info   | None                                                                                                |
| flavor_id               | None                                                                                                |
| ha                      | False                                                                                               |
| id                      | c51bc54c-9c42-457b-ba3d-b42d715c9a33                                                                |
| location                | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'admin', 'id': u'...) |
| name                    | router01                                                                                            |
| project_id              | e52584cf60234bc090c7d437b8ca7b62                                                                    |
| revision_number         | 1                                                                                                   |
| routes                  |                                                                                                     |
| status                  | ACTIVE                                                                                              |
| tags                    |                                                                                                     |
| updated_at              | 2019-04-12T07:09:47Z                                                                                |
+-------------------------+-----------------------------------------------------------------------------------------------------+

[5] 内部用のネットワークを作成し、仮想ルーターに関連付けます。
# 内部用ネットワーク作成

root@dlp ~(keystone)#
openstack network create int_net --provider-network-type vxlan

+---------------------------+----------------------------------------------------------------------------------------------------+
| Field                     | Value                                                                                              |
+---------------------------+----------------------------------------------------------------------------------------------------+
| admin_state_up            | UP                                                                                                 |
| availability_zone_hints   |                                                                                                    |
| availability_zones        |                                                                                                    |
| created_at                | 2019-04-12T07:10:24Z                                                                               |
| description               |                                                                                                    |
| dns_domain                | None                                                                                               |
| id                        | 596c0921-5acb-42e1-8b44-ff549c30cded                                                               |
| ipv4_address_scope        | None                                                                                               |
| ipv6_address_scope        | None                                                                                               |
| is_default                | False                                                                                              |
| is_vlan_transparent       | None                                                                                               |
| location                  | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'admin', 'id': u...) |
| mtu                       | 1450                                                                                               |
| name                      | int_net                                                                                            |
| port_security_enabled     | True                                                                                               |
| project_id                | e52584cf60234bc090c7d437b8ca7b62                                                                   |
| provider:network_type     | vxlan                                                                                              |
| provider:physical_network | None                                                                                               |
| provider:segmentation_id  | 74                                                                                                 |
| qos_policy_id             | None                                                                                               |
| revision_number           | 1                                                                                                  |
| router:external           | Internal                                                                                           |
| segments                  | None                                                                                               |
| shared                    | False                                                                                              |
| status                    | ACTIVE                                                                                             |
| subnets                   |                                                                                                    |
| tags                      |                                                                                                    |
| updated_at                | 2019-04-12T07:10:25Z                                                                               |
+---------------------------+----------------------------------------------------------------------------------------------------+

# 内部用ネットワークにサブネット作成

root@dlp ~(keystone)#
openstack subnet create subnet1 --network int_net \
--subnet-range 192.168.100.0/24 --gateway 192.168.100.1 \
--dns-nameserver 10.0.0.10

+-------------------+-------------------------------------------------------------------------------------------------+
| Field             | Value                                                                                           |
+-------------------+-------------------------------------------------------------------------------------------------+
| allocation_pools  | 192.168.100.2-192.168.100.254                                                                   |
| cidr              | 192.168.100.0/24                                                                                |
| created_at        | 2019-04-12T07:11:09Z                                                                            |
| description       |                                                                                                 |
| dns_nameservers   | 10.0.0.10                                                                                       |
| enable_dhcp       | True                                                                                            |
| gateway_ip        | 192.168.100.1                                                                                   |
| host_routes       |                                                                                                 |
| id                | d09f2fd8-07d9-4365-9e5b-5aeb471a1b72                                                            |
| ip_version        | 4                                                                                               |
| ipv6_address_mode | None                                                                                            |
| ipv6_ra_mode      | None                                                                                            |
| location          | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'admin', 'id'...) |
| name              | subnet1                                                                                         |
| network_id        | 596c0921-5acb-42e1-8b44-ff549c30cded                                                            |
| prefix_length     | None                                                                                            |
| project_id        | e52584cf60234bc090c7d437b8ca7b62                                                                |
| revision_number   | 0                                                                                               |
| segment_id        | None                                                                                            |
| service_types     |                                                                                                 |
| subnetpool_id     | None                                                                                            |
| tags              |                                                                                                 |
| updated_at        | 2019-04-12T07:11:09Z                                                                            |
+-------------------+-------------------------------------------------------------------------------------------------+

# 仮想ルーターに内部ネットワークを設定

root@dlp ~(keystone)#
openstack router add subnet router01 subnet1
[6] 外部接続用のネットワークを作成し、仮想ルーターに関連付けます。
# 外部用ネットワーク作成

root@dlp ~(keystone)#
openstack network create \
--provider-physical-network physnet1 \
--provider-network-type flat --external ext_net

+---------------------------+----------------------------------------------------------------------------------------------------+
| Field                     | Value                                                                                              |
+---------------------------+----------------------------------------------------------------------------------------------------+
| admin_state_up            | UP                                                                                                 |
| availability_zone_hints   |                                                                                                    |
| availability_zones        |                                                                                                    |
| created_at                | 2019-04-12T07:12:22Z                                                                               |
| description               |                                                                                                    |
| dns_domain                | None                                                                                               |
| id                        | 4ac44922-6ee9-4f99-9901-06cd69bcb64b                                                               |
| ipv4_address_scope        | None                                                                                               |
| ipv6_address_scope        | None                                                                                               |
| is_default                | False                                                                                              |
| is_vlan_transparent       | None                                                                                               |
| location                  | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'admin', 'id': u...) |
| mtu                       | 1500                                                                                               |
| name                      | ext_net                                                                                            |
| port_security_enabled     | True                                                                                               |
| project_id                | e52584cf60234bc090c7d437b8ca7b62                                                                   |
| provider:network_type     | flat                                                                                               |
| provider:physical_network | physnet1                                                                                           |
| provider:segmentation_id  | None                                                                                               |
| qos_policy_id             | None                                                                                               |
| revision_number           | 1                                                                                                  |
| router:external           | External                                                                                           |
| segments                  | None                                                                                               |
| shared                    | False                                                                                              |
| status                    | ACTIVE                                                                                             |
| subnets                   |                                                                                                    |
| tags                      |                                                                                                    |
| updated_at                | 2019-04-12T07:12:22Z                                                                               |
+---------------------------+----------------------------------------------------------------------------------------------------+

# 外部用ネットワークにサブネット作成

root@dlp ~(keystone)#
openstack subnet create subnet2 \
--network ext_net --subnet-range 10.0.0.0/24 \
--allocation-pool start=10.0.0.200,end=10.0.0.254 \
--gateway 10.0.0.1 --dns-nameserver 10.0.0.10 --no-dhcp

+-------------------+--------------------------------------------------------------------------------------------------+
| Field             | Value                                                                                            |
+-------------------+--------------------------------------------------------------------------------------------------+
| allocation_pools  | 10.0.0.200-10.0.0.254                                                                            |
| cidr              | 10.0.0.0/24                                                                                      |
| created_at        | 2019-04-12T07:13:04Z                                                                             |
| description       |                                                                                                  |
| dns_nameservers   | 10.0.0.10                                                                                        |
| enable_dhcp       | False                                                                                            |
| gateway_ip        | 10.0.0.1                                                                                         |
| host_routes       |                                                                                                  |
| id                | 19f83d21-e41f-4e96-8da1-84bfba298fc7                                                             |
| ip_version        | 4                                                                                                |
| ipv6_address_mode | None                                                                                             |
| ipv6_ra_mode      | None                                                                                             |
| location          | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'admin', 'id':...) |
| name              | subnet2                                                                                          |
| network_id        | 4ac44922-6ee9-4f99-9901-06cd69bcb64b                                                             |
| prefix_length     | None                                                                                             |
| project_id        | e52584cf60234bc090c7d437b8ca7b62                                                                 |
| revision_number   | 0                                                                                                |
| segment_id        | None                                                                                             |
| service_types     |                                                                                                  |
| subnetpool_id     | None                                                                                             |
| tags              |                                                                                                  |
| updated_at        | 2019-04-12T07:13:04Z                                                                             |
+-------------------+--------------------------------------------------------------------------------------------------+

# 仮想ルーターにゲートウェイを設定

root@dlp ~(keystone)#
openstack router set router01 --external-gateway ext_net

[7] 作成したネットワークは、外部用はデフォルトで全プロジェクトがアクセス可能ですが、内部用はデフォルトでは admin プロジェクトのみがアクセス可能なため、内部ネットワークを利用させたいプロジェクトにアクセス権限を付与しておきます。
# ネットワーク RBAC リスト表示

root@dlp ~(keystone)#
openstack network rbac list

+--------------------------------------+-------------+--------------------------------------+
| ID                                   | Object Type | Object ID                            |
+--------------------------------------+-------------+--------------------------------------+
| 0772b02f-8d21-4199-b26a-4bfcee6ade85 | network     | 4ac44922-6ee9-4f99-9901-06cd69bcb64b |
+--------------------------------------+-------------+--------------------------------------+

# RBAC の詳細 (access_as_external のみ全プロジェクトがアクセス可能)

root@dlp ~(keystone)#
openstack network rbac show 0772b02f-8d21-4199-b26a-4bfcee6ade85

+-------------------+-----------------------------------------------------------------------------------------------------+
| Field             | Value                                                                                               |
+-------------------+-----------------------------------------------------------------------------------------------------+
| action            | access_as_external                                                                                  |
| id                | 0772b02f-8d21-4199-b26a-4bfcee6ade85                                                                |
| location          | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'admin', 'id': u'...) |
| name              | None                                                                                                |
| object_id         | 4ac44922-6ee9-4f99-9901-06cd69bcb64b                                                                |
| object_type       | network                                                                                             |
| project_id        | e52584cf60234bc090c7d437b8ca7b62                                                                    |
| target_project_id | *                                                                                                   |
+-------------------+-----------------------------------------------------------------------------------------------------+

# 作成済みネットワーク一覧

root@dlp ~(keystone)#
openstack network list

+--------------------------------------+---------+--------------------------------------+
| ID                                   | Name    | Subnets                              |
+--------------------------------------+---------+--------------------------------------+
| 4ac44922-6ee9-4f99-9901-06cd69bcb64b | ext_net | 19f83d21-e41f-4e96-8da1-84bfba298fc7 |
| 596c0921-5acb-42e1-8b44-ff549c30cded | int_net | d09f2fd8-07d9-4365-9e5b-5aeb471a1b72 |
+--------------------------------------+---------+--------------------------------------+

# 作成済みプロジェクト一覧

root@dlp ~(keystone)#
openstack project list

+----------------------------------+-----------+
| ID                               | Name      |
+----------------------------------+-----------+
| e52584cf60234bc090c7d437b8ca7b62 | admin     |
| efc5c6a05d444cae80c0a80f49ba87d4 | service   |
| ff03eefa265b423aa3375acb46a8e4e0 | hiroshima |
+----------------------------------+-----------+

# [int_net] への [access_as_shared] アクセス権を [hiroshima] プロジェクトに付与

root@dlp ~(keystone)#
netID=$(openstack network list | grep int_net | awk '{ print $2 }')

root@dlp ~(keystone)#
prjID=$(openstack project list | grep hiroshima | awk '{ print $2 }')

root@dlp ~(keystone)#
openstack network rbac create --target-project $prjID --type network --action access_as_shared $netID

+-------------------+--------------------------------------------------------------------------------------------------+
| Field             | Value                                                                                            |
+-------------------+--------------------------------------------------------------------------------------------------+
| action            | access_as_shared                                                                                 |
| id                | 8ff737cb-dfce-4998-9cd5-06efe7620104                                                             |
| location          | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'admin', 'id':...) |
| name              | None                                                                                             |
| object_id         | 596c0921-5acb-42e1-8b44-ff549c30cded                                                             |
| object_type       | network                                                                                          |
| project_id        | e52584cf60234bc090c7d437b8ca7b62                                                                 |
| target_project_id | ff03eefa265b423aa3375acb46a8e4e0                                                                 |
+-------------------+--------------------------------------------------------------------------------------------------+
[8] 内部ネットワークへのアクセス権を付与したプロジェクトに所属する任意のユーザーでログインし、 作成した内部ネットワークをインスタンスに紐付けてインスタンスを作成・起動します。
# 利用可能な flavor 確認

ubuntu@dlp ~(keystone)$
openstack flavor list

+----+----------+------+------+-----------+-------+-----------+
| ID | Name     |  RAM | Disk | Ephemeral | VCPUs | Is Public |
+----+----------+------+------+-----------+-------+-----------+
| 0  | m1.small | 2048 |   10 |         0 |     1 | True      |
+----+----------+------+------+-----------+-------+-----------+

# 利用可能なイメージ確認

ubuntu@dlp ~(keystone)$
openstack image list

+--------------------------------------+------------+--------+
| ID                                   | Name       | Status |
+--------------------------------------+------------+--------+
| 7690a3c0-99f7-40fe-8cde-343824edc74a | Ubuntu1804 | active |
+--------------------------------------+------------+--------+

# 利用可能なネットワーク確認

ubuntu@dlp ~(keystone)$
openstack network list

+--------------------------------------+---------+--------------------------------------+
| ID                                   | Name    | Subnets                              |
+--------------------------------------+---------+--------------------------------------+
| 4ac44922-6ee9-4f99-9901-06cd69bcb64b | ext_net | 19f83d21-e41f-4e96-8da1-84bfba298fc7 |
| 596c0921-5acb-42e1-8b44-ff549c30cded | int_net | d09f2fd8-07d9-4365-9e5b-5aeb471a1b72 |
+--------------------------------------+---------+--------------------------------------+

# インスタンス用のセキュリティグループを作成

ubuntu@dlp ~(keystone)$
openstack security group create secgroup01

+-----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field           | Value                                                                                                                                                                                  |
+-----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| created_at      | 2019-04-12T07:17:21Z                                                                                                                                                                   |
| description     | secgroup01                                                                                                                                                                             |
| id              | 12ee1a49-f156-487d-a2f4-44e01ff568be                                                                                                                                                   |
| location        | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'hiroshima', 'id': u'ff03eefa265b423aa3375acb46a8e4e0'}), 'cloud': '', 'region_name': '', 'zone': None}) |
| name            | secgroup01                                                                                                                                                                             |
| project_id      | ff03eefa265b423aa3375acb46a8e4e0                                                                                                                                                       |
| revision_number | 1                                                                                                                                                                                      |
| rules           | created_at='2019-04-12T07:17:21Z', direction='egress', ethertype='IPv6', id='aafcf9da-1cb5-4245-a4f5-a636da904000', updated_at='2019-04-12T07:17:21Z'                                  |
|                 | created_at='2019-04-12T07:17:21Z', direction='egress', ethertype='IPv4', id='ad84f610-6bdd-43bb-95db-f992dd7f0c90', updated_at='2019-04-12T07:17:21Z'                                  |
| tags            | []                                                                                                                                                                                     |
| updated_at      | 2019-04-12T07:17:21Z                                                                                                                                                                   |
+-----------------+----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

# インスタンス接続用の SSH キーペア作成

ubuntu@dlp ~(keystone)$
ssh-keygen -q -N ""

Enter file in which to save the key (/home/ubuntu/.ssh/id_rsa):
# 公開鍵登録

ubuntu@dlp ~(keystone)$
openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey

+-------------+-------------------------------------------------+
| Field       | Value                                           |
+-------------+-------------------------------------------------+
| fingerprint | d5:48:4d:f7:6b:8a:8d:27:8b:21:96:7b:32:b8:24:81 |
| name        | mykey                                           |
| user_id     | 5ed13a6b898b412383faf11ab2099a66                |
+-------------+-------------------------------------------------+

ubuntu@dlp ~(keystone)$
netID=$(openstack network list | grep int_net | awk '{ print $2 }')

ubuntu@dlp ~(keystone)$
openstack server create --flavor m1.small --image Ubuntu1804 --security-group secgroup01 --nic net-id=$netID --key-name mykey Ubuntu_1804
ubuntu@dlp ~(keystone)$
openstack server list

+--------------------------------------+-------------+--------+-------------------------+------------+----------+
| ID                                   | Name        | Status | Networks                | Image      | Flavor   |
+--------------------------------------+-------------+--------+-------------------------+------------+----------+
| c714d070-f035-42b8-9660-999088da37b1 | Ubuntu_1804 | ACTIVE | int_net=192.168.100.136 | Ubuntu1804 | m1.small |
+--------------------------------------+-------------+--------+-------------------------+------------+----------+
[9] 作成した仮想マシンインスタンスにフローティングIP を割り当てます。
ubuntu@dlp ~(keystone)$
openstack floating ip create ext_net

+---------------------+--------------------------------------------------------------------------------------------------------+
| Field               | Value                                                                                                  |
+---------------------+--------------------------------------------------------------------------------------------------------+
| created_at          | 2019-04-12T07:20:47Z                                                                                   |
| description         |                                                                                                        |
| dns_domain          | None                                                                                                   |
| dns_name            | None                                                                                                   |
| fixed_ip_address    | None                                                                                                   |
| floating_ip_address | 10.0.0.202                                                                                             |
| floating_network_id | 4ac44922-6ee9-4f99-9901-06cd69bcb64b                                                                   |
| id                  | 602c7a0e-705b-4933-ae26-a06fb24f77b0                                                                   |
| location            | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'hiroshima', 'id': u...) |
| name                | 10.0.0.202                                                                                             |
| port_details        | None                                                                                                   |
| port_id             | None                                                                                                   |
| project_id          | ff03eefa265b423aa3375acb46a8e4e0                                                                       |
| qos_policy_id       | None                                                                                                   |
| revision_number     | 0                                                                                                      |
| router_id           | None                                                                                                   |
| status              | DOWN                                                                                                   |
| subnet_id           | None                                                                                                   |
| tags                | []                                                                                                     |
| updated_at          | 2019-04-12T07:20:47Z                                                                                   |
+---------------------+--------------------------------------------------------------------------------------------------------+

ubuntu@dlp ~(keystone)$
openstack server add floating ip Ubuntu_1804 10.0.0.202

# 設定確認

ubuntu@dlp ~(keystone)$
openstack floating ip show 10.0.0.202

+---------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field               | Value                                                                                                                                                                                                              |
+---------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| created_at          | 2019-04-12T07:20:47Z                                                                                                                                                                                               |
| description         |                                                                                                                                                                                                                    |
| dns_domain          | None                                                                                                                                                                                                               |
| dns_name            | None                                                                                                                                                                                                               |
| fixed_ip_address    | 192.168.100.136                                                                                                                                                                                                    |
| floating_ip_address | 10.0.0.202                                                                                                                                                                                                         |
| floating_network_id | 4ac44922-6ee9-4f99-9901-06cd69bcb64b                                                                                                                                                                               |
| id                  | 602c7a0e-705b-4933-ae26-a06fb24f77b0                                                                                                                                                                               |
| location            | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'hiroshima', 'id': u'ff03eefa265b423aa3375acb46a8e4e0'}), 'cloud': '', 'region_name': '', 'zone': None})                             |
| name                | 10.0.0.202                                                                                                                                                                                                         |
| port_details        | admin_state_up='True', device_id='c714d070-f035-42b8-9660-999088da37b1', device_owner='compute:nova', mac_address='fa:16:3e:da:1a:08', name='', network_id='596c0921-5acb-42e1-8b44-ff549c30cded', status='ACTIVE' |
| port_id             | 3686db20-e002-4872-abc3-d605668e690e                                                                                                                                                                               |
| project_id          | ff03eefa265b423aa3375acb46a8e4e0                                                                                                                                                                                   |
| qos_policy_id       | None                                                                                                                                                                                                               |
| revision_number     | 2                                                                                                                                                                                                                  |
| router_id           | c51bc54c-9c42-457b-ba3d-b42d715c9a33                                                                                                                                                                               |
| status              | ACTIVE                                                                                                                                                                                                             |
| subnet_id           | None                                                                                                                                                                                                               |
| tags                | []                                                                                                                                                                                                                 |
| updated_at          | 2019-04-12T07:21:33Z                                                                                                                                                                                               |
+---------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+

ubuntu@dlp ~(keystone)$
openstack server list

+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
| ID                                   | Name        | Status | Networks                            | Image      | Flavor   |
+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
| c714d070-f035-42b8-9660-999088da37b1 | Ubuntu_1804 | ACTIVE | int_net=192.168.100.136, 10.0.0.202 | Ubuntu1804 | m1.small |
+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
[10] 起動した仮想マシンインスタンスに SSH 接続できるように、先に作成したセキュリティグループにポート許可の設定を追加します。
# ICMP 許可

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol icmp --ingress secgroup01

+-------------------+--------------------------------------------------------------------------------------------------------+
| Field             | Value                                                                                                  |
+-------------------+--------------------------------------------------------------------------------------------------------+
| created_at        | 2019-04-12T07:22:26Z                                                                                   |
| description       |                                                                                                        |
| direction         | ingress                                                                                                |
| ether_type        | IPv4                                                                                                   |
| id                | 8947ac46-86ae-4622-aab9-e6cab59e1211                                                                   |
| location          | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'hiroshima', 'id': u...) |
| name              | None                                                                                                   |
| port_range_max    | None                                                                                                   |
| port_range_min    | None                                                                                                   |
| project_id        | ff03eefa265b423aa3375acb46a8e4e0                                                                       |
| protocol          | icmp                                                                                                   |
| remote_group_id   | None                                                                                                   |
| remote_ip_prefix  | 0.0.0.0/0                                                                                              |
| revision_number   | 0                                                                                                      |
| security_group_id | 12ee1a49-f156-487d-a2f4-44e01ff568be                                                                   |
| tags              | []                                                                                                     |
| updated_at        | 2019-04-12T07:22:26Z                                                                                   |
+-------------------+--------------------------------------------------------------------------------------------------------+

# SSH 許可

ubuntu@dlp ~(keystone)$
openstack security group rule create --protocol tcp --dst-port 22:22 secgroup01

+-------------------+-------------------------------------------------------------------------------------------------------+
| Field             | Value                                                                                                 |
+-------------------+-------------------------------------------------------------------------------------------------------+
| created_at        | 2019-04-12T07:22:54Z                                                                                  |
| description       |                                                                                                       |
| direction         | ingress                                                                                               |
| ether_type        | IPv4                                                                                                  |
| id                | 42f2c962-b565-4836-95ff-a7d05233b549                                                                  |
| location          | Munch({'project': Munch({'domain_name': 'default', 'domain_id': None, 'name': 'hiroshima', 'id': ...) |
| name              | None                                                                                                  |
| port_range_max    | 22                                                                                                    |
| port_range_min    | 22                                                                                                    |
| project_id        | ff03eefa265b423aa3375acb46a8e4e0                                                                      |
| protocol          | tcp                                                                                                   |
| remote_group_id   | None                                                                                                  |
| remote_ip_prefix  | 0.0.0.0/0                                                                                             |
| revision_number   | 0                                                                                                     |
| security_group_id | 12ee1a49-f156-487d-a2f4-44e01ff568be                                                                  |
| tags              | []                                                                                                    |
| updated_at        | 2019-04-12T07:22:54Z                                                                                  |
+-------------------+-------------------------------------------------------------------------------------------------------+

ubuntu@dlp ~(keystone)$
openstack security group rule list

+--------------------------------------+-------------+-----------+------------+--------------------------------------+--------------------------------------+
| ID                                   | IP Protocol | IP Range  | Port Range | Remote Security Group                | Security Group                       |
+--------------------------------------+-------------+-----------+------------+--------------------------------------+--------------------------------------+
| 3a355577-2006-4559-9a0d-e3cbada99b7f | None        | None      |            | None                                 | 77766ef7-55ff-4e6a-b636-7d26a35b5396 |
| 42f2c962-b565-4836-95ff-a7d05233b549 | tcp         | 0.0.0.0/0 | 22:22      | None                                 | 12ee1a49-f156-487d-a2f4-44e01ff568be |
| 472fcb77-9b73-4a2f-bab7-6cb094634491 | None        | None      |            | 77766ef7-55ff-4e6a-b636-7d26a35b5396 | 77766ef7-55ff-4e6a-b636-7d26a35b5396 |
| 5c859f84-2806-4319-8d75-d729c033a008 | None        | None      |            | 77766ef7-55ff-4e6a-b636-7d26a35b5396 | 77766ef7-55ff-4e6a-b636-7d26a35b5396 |
| 8947ac46-86ae-4622-aab9-e6cab59e1211 | icmp        | 0.0.0.0/0 |            | None                                 | 12ee1a49-f156-487d-a2f4-44e01ff568be |
| aafcf9da-1cb5-4245-a4f5-a636da904000 | None        | None      |            | None                                 | 12ee1a49-f156-487d-a2f4-44e01ff568be |
| ad84f610-6bdd-43bb-95db-f992dd7f0c90 | None        | None      |            | None                                 | 12ee1a49-f156-487d-a2f4-44e01ff568be |
| c1b1080f-1e09-4896-ab1d-cf85f710cf45 | None        | None      |            | None                                 | 77766ef7-55ff-4e6a-b636-7d26a35b5396 |
+--------------------------------------+-------------+-----------+------------+--------------------------------------+--------------------------------------+
[11] 仮想マシンインスタンスに割りあてられたフローティング IP 宛てに SSH 接続することで、インスタンスに SSH ログインできます。
ubuntu@dlp ~(keystone)$
openstack server list

+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
| ID                                   | Name        | Status | Networks                            | Image      | Flavor   |
+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+
| c714d070-f035-42b8-9660-999088da37b1 | Ubuntu_1804 | ACTIVE | int_net=192.168.100.136, 10.0.0.202 | Ubuntu1804 | m1.small |
+--------------------------------------+-------------+--------+-------------------------------------+------------+----------+

ubuntu@dlp ~(keystone)$
ssh ubuntu@10.0.0.202

The authenticity of host '10.0.0.202 (10.0.0.202)' can't be established.
ECDSA key fingerprint is SHA256:HbCOU5FQ/Cv/fxPHJ23EDdmZ0V9C++z99gx+LU7a1jo.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.0.0.202' (ECDSA) to the list of known hosts.
Welcome to Ubuntu 18.04.2 LTS (GNU/Linux 4.15.0-47-generic x86_64)

 * Documentation:  https://help.ubuntu.com
 * Management:     https://landscape.canonical.com
 * Support:        https://ubuntu.com/advantage

  System information as of Fri Apr 12 16:24:04 JST 2019

  System load:  0.01              Processes:           88
  Usage of /:   19.6% of 8.80GB   Users logged in:     0
  Memory usage: 6%                IP address for ens3: 192.168.100.136
  Swap usage:   0%


2 packages can be updated.
0 updates are security updates.

ubuntu@ubuntu-1804:~$    
# ログインできた
関連コンテンツ