16
neutron_plugin_cert_file =
neutron_plugin_key_file =
cgsr_fw_context_limit = 0
force_vip_port_device_owner_none = False
enable_iam_auth = False
enable_firewall_metadata = False
lb_member_slow_shutdown = False
enable_multi_gateways = False
enable_multi_segments = False
tenant_gateway_name = None
tenant_gw_selection_strategy = match_first
enable_router_nat_without_firewall = False
directly_external = OFF
directly_external_suffix = DMZ
sec_agent_enable = True
lb_resource_mode = SP
enable_lb_xff = False
5.
If you have set the
white_list
parameter to
True
, perform the following tasks:
Delete the
username
,
password
, and
domain
parameters for
SEC_SDNCONTROLLER
in the
ml2_sec_conf_h3c.ini
configuration file.
Add an authentication-free user to the controller.
−
Enter the IP address of the host where the Neutron server resides.
−
Specify the role as
Admin
.
6.
If you have set the
use_neutron_credential
parameter to
True
, perform the following steps:
a.
Modify the
neutron.conf
configuration file.
# Use the vi editor to open the
neutron.conf
configuration file.
# Press
I
to switch to insert mode, and add the following configuration. For information about
the parameters, see "
[keystone_authtoken]
admin_user = neutron
admin_password = 123456
# Press
Esc
to quit insert mode, and enter
:wq
to exit the vi editor and save the
neutron.conf
file.
b.
Add an admin user to the controller.
# Configure the username as
neutron
.
# Specify the role as
Admin
.
# Enter the password of the
neutron
user in OpenStack.
7.
Copy the installation package to the
neutron_server
container.
[root@localhost ~]# docker cp SeerEngine_DC_SEC_PLUGIN-E3603P01-py2.7.egg
neutron_server:/
8.
Install the package.
[root@localhost ~]# docker exec –it –u root –name neutron_server bash
[root@localhost ~]# easy_install SeerEngine_DC_SEC_PLUGIN-E3603P01-py2.7.egg
[root@localhost ~]# h3c-sdnplugin controller install
