Book Image

LEARNING OPENSTACK NETWORKING (NEUTRON)

By : James Denton
Book Image

LEARNING OPENSTACK NETWORKING (NEUTRON)

By: James Denton

Overview of this book

Related Content you might be interested in

Current Title:

Small book image
LEARNING OPENSTACK NETWORKING (NEUTRON)
James Denton
Oct, 2014 | 300 pages
No titles found
Table of Contents (17 chapters)
Learning OpenStack Networking (Neutron)
Learning OpenStack Networking (Neutron)
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Preparing the Network for OpenStack
Preparing the Network for OpenStack
What is OpenStack Networking?
Preparing the physical infrastructure
Physical server connections
Summary
2
Installing OpenStack
Installing OpenStack
System requirements
Before you begin
Installation of OpenStack
Summary
3
Installing Neutron
Installing Neutron
Basic Neutron constructs
Installing and configuring Neutron services
Configuring Neutron services
Summary
4
Building a Virtual Switching Infrastructure
Building a Virtual Switching Infrastructure
Providing layer 2 connectivity to instances
Types of networks in Neutron
Choosing a networking plugin
Configuring a layer 2 networking plugin
Summary
5
Creating Networks with Neutron
Creating Networks with Neutron
Network management
Attaching instances to networks
Exploring how instances get their addresses
Exploring how instances retrieve their metadata
Summary
6
Creating Routers with Neutron
Creating Routers with Neutron
Configuring the Neutron L3 agent
Router management in the CLI
Network Address Translation
Floating IP Management
Demonstrating traffic flow from instance to Internet
Router management in the dashboard
Summary
7
Load Balancing Traffic in Neutron
Load Balancing Traffic in Neutron
Fundamentals of load balancing
Integrating load balancers into the network
Installing LBaaS
Load balancer management in the CLI
Building a load balancer
Load balancer management in the dashboard
Summary
8
Protecting Instances on the Network
Protecting Instances on the Network
Security groups in OpenStack
Firewall-as-a-service
Introducing iptables
Working with security groups
Working with FWaaS
Firewall rules – behind the scenes
Summary
Additional Neutron Commands
Additional Neutron Commands
Neutron extensions
Virtual private networks
Per-tenant quotas
Cisco Nexus 1000V command reference
VMware/Nicera command reference
ML2 Configuration
ML2 Configuration
Installing the ML2 plugin
Configuring the ML2 plugin
Index
Index

Working with security groups

Security groups can be managed in either the Neutron CLI or the Horizon dashboard. Both offer a pretty complete experience and are broken down in the following sections.

Managing security groups in the CLI

From within the Neutron command-line client, a number of commands can be used to manage security groups, such as:

  • security-group-create

  • security-group-delete

  • security-group-list

  • security-group-rule-create

  • security-group-rule-delete

  • security-group-rule-list

  • security-group-rule-show

  • security-group-show

  • security-group-update

Creating security groups in the CLI

To create a security group within the CLI, use the Neutron security-group-create command as follows:

Syntax: security-group-create [--tenant-id TENANT_ID]
[--description DESCRIPTION] NAME

Note

By default, security groups in Neutron are prepopulated with two egress rules that allow all outbound traffic over IPv4 and IPv6. Inbound traffic is not permitted by default.

Deleting security groups in the CLI

To...

Previous Section
End of Section 5
Next Section