<p>You are very kind, thank you.<br>
I have only anothe doubt.<br>
When in a normal scenario you create the external net, you also create an openvswtch bridge (br-ex) on the network node and add the nic interface you have configuret for internet access.<br>
In our scenario we must have another interface in the intranet network : must we create a bridge and add the intranet interface?<br>
Must we modify any neutron configuration file to expose the new bridge ?<br>
Regards<br>
Ignazio</p>
<div class="gmail_quote">Il giorno 25/lug/2015 12:16, "Antonio Messina" <<a href="mailto:antonio.s.messina@gmail.com">antonio.s.messina@gmail.com</a>> ha scritto:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Ignazio,<br>
<br>
I did something similar, but it's not yet production so I don't know<br>
if there are any caveats or better solutions, maybe some neutron<br>
expert can tell us more.<br>
<br>
In principle you can create a neutron network on a specific vlan,<br>
assuming the compute nodes will have direct access to that vlan.<br>
<br>
neutron net-create intranet \<br>
--provider:network_type vlan \<br>
--provider:segmentation_id 308 \<br>
--provider:physical_network vlannet<br>
<br>
neutron subnet-create intranet \<br>
--name vlan308 \<br>
<a href="http://192.168.160.0/22" rel="noreferrer" target="_blank">192.168.160.0/22</a> \<br>
--no-gateway \<br>
--disable-dhcp<br>
<br>
Now this network is not shared, so it will only be available in the<br>
current tenant, or if the user has the "admin" role.<br>
<br>
It also have no dhcp. In our case this is important because we already<br>
have a dhcp server running on our intranet, but I don't know if this<br>
is an actual problem, and if the dhcp-agent will just ignore<br>
DHCPREQUEST for unknown mac addresses. This also means that your VM<br>
will not get an IP automatically, but for me this is not a problem<br>
because it's a secondary interface and I will setup the IP address<br>
statically on those VMs.<br>
<br>
In order to start a VM with an interface on that network, you have to<br>
create a "port". You can also chose the IP adress:<br>
<br>
neutron port-create<br>
--fixed-ip subnet_id=ef600ffb-0cad-47ca-8ab2-e488b96a5e58,ip_address=192.168.163.1<br>
--name vm1-vlan308 intranet<br>
<br>
(replace the id of the subnet with the correct one)<br>
<br>
then, you can start a VM using:<br>
<br>
nova boot [...] --nic port-id=6fa3a4a4-f840-4173-b00d-0cc5c9628d30<br>
<br>
(replace the ID of the port with the correct one)<br>
<br>
Please note that by default neutron set up iptables rules for the VM<br>
port based on the IP assigned by neutron, so if you try to assign a<br>
different IP to the VM it will not work.<br>
<br>
.a.<br>
<br>
On Sat, Jul 25, 2015 at 7:28 AM, Ignazio Cassano<br>
<<a href="mailto:ignaziocassano@gmail.com">ignaziocassano@gmail.com</a>> wrote:<br>
> Hy guys, I would like to setup a private cloud for my company with openstack<br>
> kilo.<br>
> I read openstack kilo documentation for centos 7 where the suggested<br>
> scenario provides a configuration with an external vlan (internet), a<br>
> managent vlan, a tunnel vlan and a stotage vlan.<br>
> I would like to add a nic on the intranet vlian for install some virtual<br>
> machines directly on my company network .<br>
> Could anyhone help me with an example based on the following data?<br>
> Storage vlan 500<br>
> external vlan 300<br>
> tunnel vlan 600<br>
> mgmt vlan 307<br>
> intranet vlan 308<br>
><br>
> Regards<br>
> Ignazio<br>
><br>
><br>
> _______________________________________________<br>
> OpenStack-operators mailing list<br>
> <a href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
><br>
<br>
<br>
<br>
--<br>
<a href="mailto:antonio.s.messina@gmail.com">antonio.s.messina@gmail.com</a><br>
<a href="mailto:antonio.messina@uzh.ch">antonio.messina@uzh.ch</a> <a href="tel:%2B41%20%280%2944%20635%2042%2022" value="+41446354222">+41 (0)44 635 42 22</a><br>
S3IT: Service and Support for Science IT <a href="http://www.s3it.uzh.ch/" rel="noreferrer" target="_blank">http://www.s3it.uzh.ch/</a><br>
University of Zurich<br>
Winterthurerstrasse 190<br>
CH-8057 Zurich Switzerland<br>
</blockquote></div>