18
Parameter
Description
service_provider parameter in fwaas_driver.ini after you configure it in
neutron.conf. This rule applies also to Lbaas and Vpnaas.
To ensure that
h3c-sec-agent
can load the driver successfully, change the value
of the driver field for [fwaas] in the /etc/kolla/neutron-server/fwaas_driver.ini
directory to networking_sec_h3c.fw.h3c_fwplugin_driver.H3CFwaasDriver.
service_provider
Directory where the extension plug-ins are saved.
admin_user
Admin username for Keystone authentication in OpenStack, for example,
neutron
.
admin_password
Admin password for Keystone authentication in OpenStack, for example,
123456
.
ml2_conf.ini
Parameter
Description
type_drivers
Driver type.
vxlan
must be specified as the first driver type.
tenant_network_types
Type of the networks to which the tenants belong.
vxlan
must be specified as the first driver type.
For intranet, only
vxlan
is available.
For extranet, only
vlan
is available.
mechanism_drivers
Name of the ml2 driver.
To create SR-IOV instances for VLAN networks, set this parameter to
sriovnicswitch, ml2_h3c
.
To create hierarchy-supported instances, set this parameter to
ml2_h3c,openvswitch
.
extension_drivers
Names of the ml2 extension drivers. Available names include
ml2_extension_h3c
,
qos
, and
port_security
. If the QoS feature is not enabled
on OpenStack, you do not need to specify the value
qos
for this parameter. To not
enable port security on OpenStack, you do not need to specify the
port_security
value for this parameter (The Kilo 2015.1, Liberty 2015.2, and Ocata 2017.1
plug-ins do not support the
port_security
value.)
Kilo 2015.1 plug-ins do not support the QoS driver.
network_vlan_ranges
Value range for the VLAN ID of the extranet, for example, physicnet1:1000:2999.
vni_ranges
Value range for the VXLAN ID of the intranet, for example, 1:500.
neutron_conf
Parameter
Description
url
URL address for accessing SNA Center or Unified Platform.
username
Username for logging in to SNA Center or Unified Platform, for
example,
sdn
. You do not need to configure a username when
the
use_neutron_credential
parameter is set to
True
.
password
Password for logging in to SNA Center or Unified Platform, for
example,
skyline
. You do not need to configure a password
when the
use_neutron_credential
parameter is set to
True
.
domain
Name of the domain where the SeerEngine-DC controller
resides, for example,
sdn
.
timeout
The amount of time that the Neutron server waits for a response
