./unstack.sh --all
- sudo service rabbitmq-server restart
- sudo service mysql restart
+rm /home/vagrant/sfc*lock
+
+sudo service rabbitmq-server restart
+sudo service mysql restart
sudo ovs-vsctl set-manager tcp:$ODL:6640
sudo ovs-vsctl add-br br-int
-sudo ovs-vsctl set-controller tcp:$ODL:6653
+sudo ovs-vsctl set-controller br-int tcp:$ODL:6653
echo "Removing all logs to save space..."
sudo rm -rf /opt/stack/logs/*
#!/usr/bin/env bash
+if [ "$#" -ne 3 ]; then
+ echo "Illegal number of parameters
+ Arg1= tap port name of SF
+ Arg2= IP address of SF
+ Arg3= Mac Addr of SF"
+ exit 1
+fi
TAP=$1
IP=$2
sudo ip route add $2/32 dev $1
sudo arp -i $1 -s $2 $3
-echo "Flow mod TBD"
-sudo ovs-ofctl add-flow br-int "table=0,ip,nw_dst=$TDEST,actions=output:4" -OOpenFlow13
-resetcontroller.sh
echo "Wait a few minutes and then check VNF status is ACTIVE (tacker vnf-list) then execute the following commands on devstack-compute-1 BEFORE running sfc03.sh:
+on devstack-control:
+tacker vnf-list
+
+on devstack-compute-1:
sudo ovs-vsctl show
sudo ovs-vsctl del-port vxlangpe-br-int
sudo ovs-vsctl del-port vxlan-br-int
sudo ovs-vsctl show
-
-- remove VNF tenant from DataStore, it borks PolEnf"
+"
tacker sfc-show mychain
-echo "Can verify flows by 'dumpflows.sh | grep nsp' on devstack-compute-1 and lack of them on devstack-control. Then run sfc04 to add chain to policy."
+echo "Can verify flows on devstack-compute-1:
+
+dumpflows.sh | grep nsp
+
+then on devstack-control:
+
+sfc04.sh"
echo "writing lock file /home/vagrant/sfc04.lock"
touch /home/vagrant/sfc04.lock
-python /vagrant/devstack-scripts/sfc/chain.py $ODL client_sg web_sg mychain
+neutron security-group-rule-list
+
+echo 'Select a security-group-rule UUID from the above list to apply a chain to. This step can be repeated to add more security group rules to the chain.
+
+You can enter this either via the YangUI or sending:
+
+http://localhost:8181/restconf/operations/neutron-gbp-mapper:change-action-of-security-group-rules
+{
+ "input": {
+ "security-group-rule": [
+ {
+ "uuid": "<uuid of rule1>"
+ },
+ {
+ "uuid": "<uuid of rule2>"
+ }
+ ],
+ "action": {
+ "sfc-chain-name": "mychain"
+ }
+ }
+}'
+
+#python /vagrant/devstack-scripts/sfc/chain.py $ODL client_sg web_sg mychain
echo "Chain action added to policy.
+Enter route for SF on devstack-compute-1:
+
kernelmods.sh
"
Code Review / groupbasedpolicy.git / commitdiff