OpenStack Guide

ovs-ofctl_sbin: CommandFilter, /sbin/ovs-ofctl, root

ovs-ofctl_sbin_usr: CommandFilter, /usr/sbin/ovs-ofctl, root

xe: CommandFilter, /sbin/xe, root

xe_usr: CommandFilter, /usr/sbin/xe, root

hostname: CommandFilter, /bin/hostname, root

lldpctl: CommandFilter, /usr/sbin/lldpctl, root

# ip_lib

ip: IpFilter, /sbin/ip, root

ip_usr: IpFilter, /usr/sbin/ip, root

ip_exec: IpNetnsExecFilter, /sbin/ip, root

ip_exec_usr: IpNetnsExecFilter, /usr/sbin/ip, root

Step 4: Restart the Dell OVS Agent on Nova Compute Node or

Network Node

To restart the Dell OVS Agent on Nova Compute Node or Network Node:

1. Navigate to the /etc/init/ directory

2. Make a backup of the existing quantum-plugin-openvswitch-agent.conf file.

3. Change the quantum-plugin-openvswitch-agent.conf file as follows so that the Dell OVS Agent configuration is

selected and runs it.

exec start-stop-daemon --start --chuid quantum --exec /usr/bin/quantum-openvswitch-agent --config-file=/etc/

quantum/quantum.conf --config-file=/etc/quantum/plugins/dell/agent/dell_ovs_quantum_plugin.ini --log-

file=/var/log/quantum/openvswitch-agent.log

NOTE: The following configuration picks up the Dell OVS agent and runs it.

--config-file=/etc/quantum/plugins/dell/agent/dell_ovs_quantum_plugin.ini

4. On each Nova Compute Node or Network Node, start the Dell OVS Agent by executing the service quantum-plugin-

openvswitch-agent restart command.

Step 5: Configure the Nova Compute Node or Network Node

To test the connectivity of VM instances on different Compute Nodes, apply the nova security rule and modify the

administrator password settings. These security rules allow the VMs to ping each other.

Pre-requisities

To execute these commands, install the Nova CLI client needs to be installed on each compute node or network node.

For information about install the Nova client, refer to standard CLI installation guide from Openstack. http://

docs.openstack.org/cli/quick-start/content/index.html

To test the connectivity of VM instances on different compute nodes:

1. On each Nova Compute Node, add the Nova Security Rule to allow the firewall to have access to ICMP and TCP.

nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0

nova secgroup-add-rule default tcp 22 22 0.0.0.0/0

2. The following configuration needs to be done after the Nova CLI is installed

export OS_USERNAME=admin

export OS_PASSWORD=password