Add an OpenStack External Network
This section describes how to add an OpenStack external network.
Note |
Execute the commands in this procedure sourcing the keystone file for the project where you want to create the network constructs and the instance. |
Before you begin
You must have done the following before adding an OpenStack external network:
-
Created a Layer 3 outside connection (L3Out) in Cisco Application Centric Infrastructure (ACI).
The L3Out can be in the OpenStack-created tenant (dedicated L3out for the OpenStack tenant) or in the Common tenant (Shared L3out across multiple OpenStack tenants). This procedure assumes that a dedicated L3out called l3out1 is configured in the OpenStack tenant.
-
Specified the following in the L3Out:
-
Interfaces and their IP address information.
-
Dynamic routing, if used.
-
An external endpoint group (EPG).
This procedure uses an external EPG named extEpg.
-
Note |
Do not add any contracts; the plug-in adds them automatically. |
Important |
If you require Source Network Address Translation (SNAT) or a floating IP (FIP) address, you must define the L3Out in a different VRF from the one created by OpenStack. |
Procedure
Step 1 |
Create the Neutron external network and provide the distinguished name of the L3Out. Example:
The following shows an example of the creation of the external network with NAT enabled:
In Cisco ACI, the command creates a new EPG—EXT-l3out1— and a new bridge domain—EXT-l3out1, as shown in the following screen capture of the Cisco Application Policy Infrastructure Controller (APIC) GUI: |
Step 2 |
Create a Neutron subnet that will be used for SNAT and the floating IP address. This step is not required if you used Example:
The OpFlex agent automatically assigns one IP address for every compute node from the subnet. Virtual machines (VMs) connecting to the external use this IP address (one-to-many NAT) unless they have been assigned with a floating IP address. The following shows an example of the creation of the external network with NAT enabled
Creating a SNAT subnet generates a new subnet under the bridge domain, as shown in the following screen capture of the Cisco APIC GUI: |
Step 3 |
(Optional) Assign one or more floating subnets to the external Neutron network: Example:
|
Step 4 |
Attach the Neutron external network to one OpenStack router as a gateway. Example:
The command creates a contract that allows external connectivity for tenant networks attached to the OpenStack router of the external Neutron network, as shown in the following image: |