diff options
| author | David M. Syzdek <syzdek@bindlebinaries.com> | 2018-09-11 12:31:34 -0800 |
|---|---|---|
| committer | David M. Syzdek <syzdek@bindlebinaries.com> | 2018-09-11 12:31:34 -0800 |
| commit | adf1cb55e7838fc6a839908f6ab0179da62a20ef (patch) | |
| tree | 6308dfbce15ea7c034a506fcb79deed4fb5ebe4a | |
| parent | cd70b65553d1389ec975230ea7dcc34c4e1c9daa (diff) | |
| download | scratchpad-adf1cb55e7838fc6a839908f6ab0179da62a20ef.tar.gz scratchpad-adf1cb55e7838fc6a839908f6ab0179da62a20ef.tar.bz2 scratchpad-adf1cb55e7838fc6a839908f6ab0179da62a20ef.tar.xz scratchpad-adf1cb55e7838fc6a839908f6ab0179da62a20ef.zip | |
Updating SD-WAN notes with VM configurations
| -rw-r--r-- | notes/projects/sd-wan/servers.md | 81 |
1 files changed, 59 insertions, 22 deletions
diff --git a/notes/projects/sd-wan/servers.md b/notes/projects/sd-wan/servers.md index 401c23f..3d694dc 100644 --- a/notes/projects/sd-wan/servers.md +++ b/notes/projects/sd-wan/servers.md | |||
| @@ -145,7 +145,7 @@ Infrastructure Networks | |||
| 145 | - Private ASN: TBD | 145 | - Private ASN: TBD |
| 146 | - Flannel Net: TBD (172.16.0.0/16???) | 146 | - Flannel Net: TBD (172.16.0.0/16???) |
| 147 | 147 | ||
| 148 | * ASN: 65520 | 148 | * ASN: 65520 (TODO: reserve in Wiki) |
| 149 | 149 | ||
| 150 | * VLAN | 150 | * VLAN |
| 151 | - Firewall P2P: SDWAN_FW / 2056 (js5.prv.cwc/js6.prv.cwc) | 151 | - Firewall P2P: SDWAN_FW / 2056 (js5.prv.cwc/js6.prv.cwc) |
| @@ -212,6 +212,16 @@ Hosts | |||
| 212 | ===== | 212 | ===== |
| 213 | 213 | ||
| 214 | 214 | ||
| 215 | Virtual Address | ||
| 216 | --------------- | ||
| 217 | |||
| 218 | * 209.193.12.1 - OPEN | ||
| 219 | * 209.193.12.2 - OPEN | ||
| 220 | * 209.193.12.3 - OPEN | ||
| 221 | * 209.193.12.4 - sdnsblb.cwc.acsalaska.net (southbound load balancer) [TODO: Add to DNS] | ||
| 222 | * 209.193.12.5 - sdnhaproxy.cwc.acsalaska.net (Haproxy HA) [TODO: Add to DNS] | ||
| 223 | |||
| 224 | |||
| 215 | Servers/Hypervsiors | 225 | Servers/Hypervsiors |
| 216 | ------------------- | 226 | ------------------- |
| 217 | 227 | ||
| @@ -400,9 +410,9 @@ Network Equipment | |||
| 400 | - Network: lo; 209.193.12.48/32; n/a | 410 | - Network: lo; 209.193.12.48/32; n/a |
| 401 | - Network: fxp0 10.0.2.183/24 GW 10.0.2.254; TBD | 411 | - Network: fxp0 10.0.2.183/24 GW 10.0.2.254; TBD |
| 402 | - Network: xe-0/0/0 209.193.12.33/31; js7.prv.cwc - xe-0/1/0 (access tag 2000) | 412 | - Network: xe-0/0/0 209.193.12.33/31; js7.prv.cwc - xe-0/1/0 (access tag 2000) |
| 403 | - Network: xe-0/0/1 209.193.12.35/31; js7.prv.cwc - xe-0/1/1 (access tag 2001) | 413 | - Network: xe-0/0/1 unused |
| 404 | - Network: xe-0/0/2 209.193.12.37/31; js7.prv.cwc - xe-0/1/2 (access tag 2002) | 414 | - Network: xe-0/0/2 unused |
| 405 | - Network: xe-0/0/3 209.193.12.39/31; js7.prv.cwc - xe-0/1/3 (access tag 2003) | 415 | - Network: xe-0/0/3 unused |
| 406 | 416 | ||
| 407 | * jr2.nwc (was jfw2.lab) | 417 | * jr2.nwc (was jfw2.lab) |
| 408 | - Purpose: CSO Hub | 418 | - Purpose: CSO Hub |
| @@ -416,10 +426,10 @@ Network Equipment | |||
| 416 | - Power: PSU2: ps67.prv.nwc outlet 5; | 426 | - Power: PSU2: ps67.prv.nwc outlet 5; |
| 417 | - Network: lo; 209.193.12.49/32;; n/a | 427 | - Network: lo; 209.193.12.49/32;; n/a |
| 418 | - Network: fxp0 10.0.2.184/24 GW 10.0.2.254; cs13.prv.nwc Gi1/0/3 | 428 | - Network: fxp0 10.0.2.184/24 GW 10.0.2.254; cs13.prv.nwc Gi1/0/3 |
| 419 | - Network: xe-0/0/0 209.193.12.41/31; js7.prv.nwc - xe-0/1/0 (access tag 2000) | 429 | - Network: xe-0/0/0 209.193.12.35/31; js7.prv.nwc - xe-0/1/0 (access tag 2000) |
| 420 | - Network: xe-0/0/1 209.193.12.43/31; js7.prv.nwc - xe-0/1/1 (access tag 2001) | 430 | - Network: xe-0/0/1 unused |
| 421 | - Network: xe-0/0/2 209.193.12.45/31; js7.prv.nwc - xe-0/1/2 (access tag 2002) | 431 | - Network: xe-0/0/2 unused |
| 422 | - Network: xe-0/0/3 209.193.12.47/31; js7.prv.nwc - xe-0/1/3 (access tag 2003) | 432 | - Network: xe-0/0/3 unused |
| 423 | 433 | ||
| 424 | * jr3.cwc | 434 | * jr3.cwc |
| 425 | - Purpose: Juniper CSO VM Firewall | 435 | - Purpose: Juniper CSO VM Firewall |
| @@ -588,7 +598,6 @@ Unless otherwsie noted, the following is run as root from the respective hosts. | |||
| 588 | 598 | ||
| 589 | sudo apt-get install python-pip | 599 | sudo apt-get install python-pip |
| 590 | sudo apt-get install libssl-dev | 600 | sudo apt-get install libssl-dev |
| 591 | #sudo apt-get install python-dev | ||
| 592 | 601 | ||
| 593 | - Copy install files to `/usr/local/src` | 602 | - Copy install files to `/usr/local/src` |
| 594 | - KVM-4.0.1.tar.gz | 603 | - KVM-4.0.1.tar.gz |
| @@ -638,21 +647,49 @@ Unless otherwsie noted, the following is run as root from the respective hosts. | |||
| 638 | # false start 1 (will fail) | 647 | # false start 1 (will fail) |
| 639 | ./provision_vm.sh | 648 | ./provision_vm.sh |
| 640 | 649 | ||
| 641 | # install python modules | ||
| 642 | pip install psutil | ||
| 643 | pip install hurry.filesize | ||
| 644 | pip install oslo.config | ||
| 645 | pip install pyyaml | ||
| 646 | pip install easyprocess | ||
| 647 | pip install tendo | ||
| 648 | pip install colorlog | ||
| 649 | pip install eventlet | ||
| 650 | pip install paramiko | ||
| 651 | pip install flask | ||
| 652 | |||
| 653 | # false start 2 (will fail) | 650 | # false start 2 (will fail) |
| 654 | ./provision_vm.sh | 651 | ./provision_vm.sh |
| 655 | 652 | ||
| 653 | # copy package and config to installer vm | ||
| 654 | cd cd /usr/local/src/ | ||
| 655 | scp Contrail_Service_Orchestration_4.0.1.tar.gz root@sdninstallervm.cwc.acsalaska.net: | ||
| 656 | scp Contrail_Service_Orchestration_4.0.1/confs/provision_vm.conf root@sdninstallervm.cwc.acsalaska.net: | ||
| 657 | |||
| 658 | * Configure initial deployment (sdninstallervm.cwc) | ||
| 659 | |||
| 660 | - prepare directory | ||
| 661 | |||
| 662 | cd /root | ||
| 663 | tar -xf Contrail_Service_Orchestration_4.0.1.tar.gz | ||
| 664 | cp provision_vm.conf Contrail_Service_Orchestration_4.0.1/confs/Contrail_Service_Orchestration_4.0.1 | ||
| 665 | |||
| 666 | - start configuration | ||
| 667 | |||
| 668 | cd /root/Contrail_Service_Orchestration_4.0.1 | ||
| 669 | ./setup_assist.sh | ||
| 670 | |||
| 671 | * Snapshot VMs (xen16/xen17/xen18/xen19) | ||
| 672 | |||
| 673 | # shutdown VMs | ||
| 674 | for DOM in $(virsh list |grep sdn |awk '{print$2}');do | ||
| 675 | virsh shutdown ${DOM}; | ||
| 676 | done | ||
| 677 | |||
| 678 | # snapshot VMs | ||
| 679 | SNAPDIR="/root/ubuntu_vm/snap1/$(date +%Y-%m-%d-%H%M)"; | ||
| 680 | mkdir -p "${SNAPDIR}"; | ||
| 681 | for DOM in $(virsh list --all |grep sdn |awk '{print$2}');do | ||
| 682 | echo ${DOM}; | ||
| 683 | virsh dumpxml ${DOM} > "${SNAPDIR}/${DOM}.domxml"; | ||
| 684 | cp -vpR --sparse=always /root/ubuntu_vm/${DOM} "${SNAPDIR}/${DOM}"; | ||
| 685 | done | ||
| 686 | |||
| 687 | # restart VMs | ||
| 688 | for DOM in $(virsh list --inactive |grep sdn |awk '{print$2}');do | ||
| 689 | echo ${DOM}; | ||
| 690 | virsh start ${DOM}; | ||
| 691 | done | ||
| 692 | |||
| 656 | 693 | ||
| 657 | Re-install CSO | 694 | Re-install CSO |
| 658 | ============== | 695 | ============== |
| @@ -748,7 +785,7 @@ Unless otherwsie noted, the following is run as root from the respective hosts. | |||
| 748 | 785 | ||
| 749 | SNAPDIR="/root/ubuntu_vm/snap1/$(date +%Y-%m-%d-%H%M)"; | 786 | SNAPDIR="/root/ubuntu_vm/snap1/$(date +%Y-%m-%d-%H%M)"; |
| 750 | mkdir -p "${SNAPDIR}"; | 787 | mkdir -p "${SNAPDIR}"; |
| 751 | for DOM in $(virsh list --all |grep sdwan |grep -v install |awk '{print$2}');do | 788 | for DOM in $(virsh list --all |grep sdn |grep -v install |awk '{print$2}');do |
| 752 | echo ${DOM}; | 789 | echo ${DOM}; |
| 753 | virsh dumpxml ${DOM} > "${SNAPDIR}/${DOM}.domxml"; | 790 | virsh dumpxml ${DOM} > "${SNAPDIR}/${DOM}.domxml"; |
| 754 | cp -vpR --sparse=always /root/ubuntu_vm/${DOM} "${SNAPDIR}/${DOM}"; | 791 | cp -vpR --sparse=always /root/ubuntu_vm/${DOM} "${SNAPDIR}/${DOM}"; |
