Skip to content

Instantly share code, notes, and snippets.

@srics
Last active August 29, 2015 14:16
Show Gist options
  • Save srics/af9854f5ced87614d89f to your computer and use it in GitHub Desktop.
Save srics/af9854f5ced87614d89f to your computer and use it in GitHub Desktop.
devstack vpnaas local.conf files
[[local|localrc]]
HOST_IP=192.168.110.202
ADMIN_PASSWORD=devstack
MYSQL_PASSWORD=devstack
RABBIT_PASSWORD=devstack
SERVICE_PASSWORD=$ADMIN_PASSWORD
SERVICE_TOKEN=devstack
# Neutron ML2 with OpenVSwitch
Q_PLUGIN=ml2
Q_AGENT=openvswitch
FLOATING_RANGE=192.168.110.0/24
Q_FLOATING_ALLOCATION_POOL="start=192.168.110.20,end=192.168.110.29"
PUBLIC_NETWORK_NAME=external
PUBLIC_NETWORK_GATEWAY=192.168.110.1
PUBLIC_PHYSICAL_NETWORK=public
# Required for l3-agent to connect to external-network-bridge
PUBLIC_BRIDGE=br-ext
# ML2 OVS
OVS_PHYSICAL_BRIDGE=br-ext
OVS_BRIDGE_MAPPINGS=public:br-ext
enable_service q-l3
enable_service q-svc
enable_service q-agt
enable_service q-dhcp
enable_service q-meta
enable_service neutron
enable_service q-vpn
enable_service q-fwaas
enable_service n-novnc
# Heat
disable_service heat
disable_service h-eng
disable_service h-api
disable_service h-api-cfn
disable_service h-api-cw
# Nova
disable_service n-net
VIRT_DRIVER=libvirt
# Pip
PIP_USE_MIRRORS=False
USE_GET_PIP=1
# Disable Cinder
disable_service c-vol
disable_service c-api
disable_service c-sch
disable_service c-bak
# Tempest
enable_service tempest
TEMPEST_HTTP_IMAGE=127.0.0.1
OFFLINE=False
RECLONE=False
# Logging
LOGFILE=$DEST/logs/stack.sh.log
SCREEN_LOGDIR=$DEST/logs/screen
#!/bin/bash -x
echo "local.sh: start customizations"
function get_id () {
echo `"$@" | awk '/ id / { print $4 }'`
}
source /opt/stack/devstack/openrc admin admin
SITE=left
neutron security-group-create cirros-secgrp
neutron security-group-rule-create --protocol icmp --direction ingress cirros-secgrp
neutron security-group-rule-create --protocol tcp --port-range-min 22 --port-range-max 22 --direction ingress cirros-secgrp
neutron net-create ${SITE}
neutron subnet-create ${SITE} --name ${SITE}-subnet 11.1.0.0/24
NET_ID=$(get_id neutron net-show ${SITE})
nova boot --image cirros-0.3.2-x86_64-uec --flavor m1.tiny --nic net-id=$NET_ID --security-groups cirros-secgrp cirros-${SITE}
sleep 5
VNC_URL=$(nova get-vnc-console cirros-${SITE} novnc | grep novnc | cut -d' ' -f4)
neutron router-create router2
neutron router-gateway-set router2 external
neutron router-interface-add router2 "subnet=${SITE}-subnet"
neutron vpn-ikepolicy-create ike0
neutron vpn-ipsecpolicy-create esp0
neutron vpn-service-create --name vpnsvc0 router2 ${SITE}-subnet
echo "local.sh: VNC_URL is ${VNC_URL}"
echo "local.sh: end customizations"
[[local|localrc]]
HOST_IP=192.168.110.203
ADMIN_PASSWORD=devstack
MYSQL_PASSWORD=devstack
RABBIT_PASSWORD=devstack
SERVICE_PASSWORD=$ADMIN_PASSWORD
SERVICE_TOKEN=devstack
# Neutron ML2 with OpenVSwitch
Q_PLUGIN=ml2
Q_AGENT=openvswitch
FLOATING_RANGE=192.168.110.0/24
Q_FLOATING_ALLOCATION_POOL="start=192.168.110.30,end=192.168.110.39"
PUBLIC_NETWORK_NAME=external
PUBLIC_NETWORK_GATEWAY=192.168.110.1
PUBLIC_PHYSICAL_NETWORK=public
# Required for l3-agent to connect to external-network-bridge
PUBLIC_BRIDGE=br-ext
# ML2 OVS
OVS_PHYSICAL_BRIDGE=br-ext
OVS_BRIDGE_MAPPINGS=public:br-ext
enable_service q-l3
enable_service q-svc
enable_service q-agt
enable_service q-dhcp
enable_service q-meta
enable_service neutron
enable_service q-vpn
enable_service q-fwaas
enable_service n-novnc
# Heat
disable_service heat
disable_service h-eng
disable_service h-api
disable_service h-api-cfn
disable_service h-api-cw
# Nova
disable_service n-net
VIRT_DRIVER=libvirt
# Pip
PIP_USE_MIRRORS=False
USE_GET_PIP=1
# Disable Cinder
disable_service c-vol
disable_service c-api
disable_service c-sch
disable_service c-bak
# Tempest
enable_service tempest
TEMPEST_HTTP_IMAGE=127.0.0.1
OFFLINE=False
RECLONE=False
# Logging
LOGFILE=$DEST/logs/stack.sh.log
SCREEN_LOGDIR=$DEST/logs/screen
#!/bin/bash -x
echo "local.sh: start customizations"
function get_id () {
echo `"$@" | awk '/ id / { print $4 }'`
}
source /opt/stack/devstack/openrc admin admin
SITE=right
neutron security-group-create cirros-secgrp
neutron security-group-rule-create --protocol icmp --direction ingress cirros-secgrp
neutron security-group-rule-create --protocol tcp --port-range-min 22 --port-range-max 22 --direction ingress cirros-secgrp
neutron net-create ${SITE}
neutron subnet-create ${SITE} --name ${SITE}-subnet 17.1.0.0/24
NET_ID=$(get_id neutron net-show ${SITE})
nova boot --image cirros-0.3.2-x86_64-uec --flavor m1.tiny --nic net-id=$NET_ID --security-groups cirros-secgrp cirros-${SITE}
sleep 5
VNC_URL=$(nova get-vnc-console cirros-${SITE} novnc | grep novnc | cut -d' ' -f4)
neutron router-create router2
neutron router-gateway-set router2 external
neutron router-interface-add router2 "subnet=${SITE}-subnet"
neutron vpn-ikepolicy-create ike0
neutron vpn-ipsecpolicy-create esp0
neutron vpn-service-create --name vpnsvc0 router2 ${SITE}-subnet
echo "local.sh: VNC_URL is ${VNC_URL}"
echo "local.sh: end customizations"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment