From 04b52e3d980846288da476e40ef1cae26ae2d1f0 Mon Sep 17 00:00:00 2001 From: Stuart Mackie Date: Thu, 21 Jan 2016 12:36:48 -0500 Subject: Add python helper scripts Change-Id: I83b378941082d8f9aeae88f6cf9e586d8eb7458d Signed-off-by: Stuart Mackie --- Testcases/configuration.md | 666 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 666 insertions(+) create mode 100644 Testcases/configuration.md (limited to 'Testcases/configuration.md') diff --git a/Testcases/configuration.md b/Testcases/configuration.md new file mode 100644 index 0000000..7ca3af2 --- /dev/null +++ b/Testcases/configuration.md @@ -0,0 +1,666 @@ + + + + + + + + + + + + + + orch/configuration.md at master · tonyliu0592/orch · GitHub + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Skip to content + + + + + + + + + + + + +
+ +
+
+ + +
+
+
+ +
+
+ + + + + +

+ + /orch + + + + + +

+ +
+
+ + + +
+
+ +
+
+ + + + + + + +
+ +
+ + + +
+ +
+ + Find file + + +
+
+ orch/doc/configuration.md +
+
+ + +
+ Fetching contributors… +
+ +
+ + Cannot retrieve contributors at this time +
+ +
+
+
+ +
+ Raw + Blame + History +
+ + + + +
+ +
+ 201 lines (153 sloc) + + 5.46 KB +
+
+ + +
+

Command line utility to configure Contrail

+ +

Files

+ +
config
+config_shell.py
+config_obj.py
+
+ +

Syntax

+ +
config [access options] <command> <object> [name] [options]
+
+  access options:
+    Options to access API server of OpenStack and OpenContrail.
+    --username <user name>
+    --password <user password>
+    --region <region name>
+    --tenant <tenant name>
+    --api-server <API server IP address>
+
+  <command> <object> [name] [options]:
+
+    add vdns <name>
+      --domain-name <name>
+      --record-order [ random | fixed | round-robin ]
+      --next-dns <name>
+
+    show vdns [name]
+
+    delete vdns <name>
+
+    add ipam <name>
+      --dns-type [ none | default | virtual | tenant ]
+      --virtual-dns <virtual DNS>
+      --tenant-dns <tenant DNS>
+      --domain-name <domain name>
+      --ntp-server <NTP server>
+
+    show ipam [name]
+
+    delete ipam <name>
+
+    add policy <name>
+      --direction [ <> | > ]
+      --protocol [any | tcp | udp | icmp]
+      --src-net <source network>
+      --dst-net <destination network>
+      --src-port <start:end>
+      --dst-port <start:end>
+      --action [ pass | deny | drop | reject | alert | log | service ]
+      --service <service>
+
+    show policy <name>
+
+    delete policy <name>
+      --rule <rule index>
+
+    add security-group <name>
+        --rule <rule index>
+        --direction [ ingress | egress ]
+        --protocol [any | tcp | udp | icmp]
+        --address <prefix/length>
+        --port <start:end>
+
+    show security-group [name]
+
+    delete security-group <name>
+
+    add network <name>
+        --ipam <IPAM>
+        --subnet <prefix/length>
+        --gateway <gateway>
+        --policy <policy>
+        --route-target <route target>
+        --route-table <route table>
+        --l2
+
+    show network [name]
+
+    delete network <name>
+        --policy <policy>
+        --route-target <route target>
+        --route-table <route table>
+
+    add floating-ip-pool <network>:<pool>
+
+    show floating-ip-pool [<network>:<pool>]
+
+    delete floating-ip-pool <network>:<pool>
+
+    add vm <name>
+        --image <image>
+        --flavor <flavor>
+        --network <network>
+        --node <node name>
+        --user-data <file name>
+        --wait
+
+    show vm [name]
+
+    delete vm <name>
+
+    add interface-route-table <name>
+        --route <prefix/length>
+
+    show interface-route-table [name]
+
+    delete interface-route-table <name>
+
+    add vm-interface <VM>:<network>
+        --interface-route-table <name>
+        --security-group <name>
+        --floating-ip-pool <tenant>:<network>:<pool>
+        --floating-ip any | <IP>
+
+    show vm-interface <VM>:<network>
+
+    delete vm-interface <VM>:<network>
+        --interface-route-table <name>
+        --security-group <name>
+        --floating-ip
+
+    add route-table <name>
+        --route <prefix/length:next-hop>
+
+    show route-table [name]
+
+    delete route-table <name>
+        --route <prefix/length:next-hop>
+
+    add service-template <name>
+        --mode [ transparent | in-network | in-network-nat ]
+        --type [ firewall | analyzer ]
+        --image <name>
+        --flavor <name>
+        --scale
+        --interface-type [ management | left | right | other ]
+
+    show service-template [name]
+
+    delete service-template <name>
+
+    add service-instance <name>
+        --template <name>
+        --management-network <name>
+        --left-network <name>
+        --left-route <prefix/length>
+        --right-network <name>
+        --right-route <prefix/length>
+        --scale-max <number>
+        --auto-policy
+
+    show service-instance [name]
+
+    delete service-instance <name>
+
+    add link-local <name>
+        --link-local-address <link local address>:<link local port>
+        --fabric-address '<fabric address>:<fabric port>'
+
+    show link-local [name]
+
+    delete link-local <name>
+
+    show image
+
+    show flavor
+
+ +

Examples

+ +

Allocate floating IP to VM interface.

+ +
# config add ipam ipam-default
+# config add policy policy-default
+# config add network front-end --ipam ipam-default --subnet 192.168.1.0/24 --policy policy-default
+# config add network back-end --ipam ipam-default --subnet 192.168.1.0/24 --policy policy-default
+# config add vm server --image "CentOS 6.4 1-6" --flavor m1.small --network front-end
+# config add vm database --image "CentOS 6.4 1-6" --flavor m1.small --network back-end
+
+ +

Allocate floating IP to VM interface.

+ +
# config add network public --ipam ipam-default --sbunet 10.8.10.0/24 --route-target 64512:10000
+# config add floating-ip-pool public-pool --network public
+# config add vm-interface server:front-end --floating-ip --floating-ip-pool public-pool
+
+ +

Create layer-3 service template and service instance.

+ +
# config add service template vsrx-l3 --mode in-network --type firewall --image vsrx-12.1x47 --flavor m1.medium --interface-type management --interface-type left --interface-type right
+# config add service-instance vsrx-l3 --template vsrx-l2 --management-network management --left-network front-end --right-network backend
+# config add policy vsrx-l3 --src-net front-end --dst-net back-end --action service --service vsrx-l3
+# config add network front-end --policy vsrx-l3
+# config add network back-end --policy vsrx-l3
+
+ +

Create layer-2 service template and service instance.

+ +
# config add service template vsrx-l2 --mode transparent --type firewall --image vsrx-12.1x47 --flavor m1.medium --interface-type management --interface-type left --interface-type right
+# config add service-instance vsrx-l2 --template vsrx-l2 --management-network management
+
+
+
+ +
+ +Jump to Line + + +
+
+
+ +
+
+ +
+ +
+ +
+ + + + + + + +
+ + + Something went wrong with that request. Please try again. +
+ + + + + + + + + + + + + + -- cgit 1.2.3-korg