626b92bea2
Since SLES 12 and openSUSE 13.2 both use systemd, we can remove special handling for them and also merge instructions with the Fedora based distros. Update specifice instructions in Basic chapter. Change-Id: I16bc5695e60dd00e54c4eb63caf4ccf08bc36842
85 lines
4.4 KiB
XML
85 lines
4.4 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
version="5.0"
|
|
xml:id="basics-networking">
|
|
<?dbhtml stop-chunking?>
|
|
<title>Networking</title>
|
|
<para>After installing the operating system on each node for the
|
|
architecture that you choose to deploy, you must configure the network
|
|
interfaces. We recommend that you disable any automated network
|
|
management tools and manually edit the appropriate configuration files
|
|
for your distribution. For more information on how to configure networking
|
|
on your distribution, see the
|
|
<link os="ubuntu"
|
|
xlink:href="https://help.ubuntu.com/lts/serverguide/network-configuration.html"
|
|
>documentation.</link>
|
|
<link os="debian"
|
|
xlink:href="https://wiki.debian.org/NetworkConfiguration"
|
|
>documentation.</link>
|
|
<link os="rhel;centos;fedora"
|
|
xlink:href="https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Deployment_Guide/s1-networkscripts-interfaces.html"
|
|
>documentation.</link>
|
|
<link os="sles;opensuse"
|
|
xlink:href="https://www.suse.com/documentation/sles-12/book_sle_admin/data/sec_basicnet_manconf.html"
|
|
>SLES 12</link>
|
|
<phrase os="sles;opensuse"> or </phrase>
|
|
<link os="sles;opensuse"
|
|
xlink:href="http://activedoc.opensuse.org/book/opensuse-reference/chapter-13-basic-networking"
|
|
>openSUSE documentation.</link></para>
|
|
<para>All nodes require Internet access for administrative purposes
|
|
such as package installation, security updates,
|
|
<glossterm>DNS</glossterm>, and
|
|
<glossterm baseform="Network Time Protocol (NTP)"
|
|
>NTP</glossterm>. In most cases, nodes should obtain Internet
|
|
access through the management network interface. To highlight
|
|
the importance of network separation, the example architectures
|
|
use <link xlink:href="https://tools.ietf.org/html/rfc1918"
|
|
>private address space</link> for the management network and assume
|
|
that network infrastructure provides Internet access via
|
|
<glossterm baseform="Network Address Translation (NAT)"
|
|
>NAT</glossterm>. To illustrate the flexibility of
|
|
<glossterm>IaaS</glossterm>, the example architectures use public
|
|
IP address space for the external network and assume that network
|
|
infrastructure provides direct Internet access to instances in
|
|
your OpenStack environment. In environments with only one block
|
|
of public IP address space, both the management and external networks
|
|
must ultimately obtain Internet access using it. For simplicity, the
|
|
diagrams in this guide only show Internet access for OpenStack
|
|
services.</para>
|
|
<procedure os="sles;opensuse">
|
|
<title>To disable Network Manager</title>
|
|
<step>
|
|
<para>Use the YaST network module:</para>
|
|
<screen os="opensuse;sles"><prompt>#</prompt> <userinput>yast2 network</userinput></screen>
|
|
<para>For more information, see the
|
|
<link xlink:href="https://www.suse.com/documentation/sles-12/book_sle_admin/data/sec_nm_activate.html">SLES </link> or
|
|
the
|
|
<link xlink:href="http://activedoc.opensuse.org/book/opensuse-reference/chapter-13-basic-networking#sec.basicnet.yast.netcard.global">
|
|
openSUSE documentation</link>.
|
|
</para>
|
|
</step>
|
|
</procedure>
|
|
<note>
|
|
<para os="rhel;centos;fedora;sles;opensuse">Your distribution enables
|
|
a restrictive <glossterm>firewall</glossterm> by default. During the
|
|
installation process, certain steps will fail unless you alter or
|
|
disable the firewall. For more information about securing your
|
|
environment, refer to the
|
|
<link xlink:href="http://docs.openstack.org/sec/">OpenStack
|
|
Security Guide</link>.</para>
|
|
<para os="ubuntu;debian">Your distribution does not enable a
|
|
restrictive <glossterm>firewall</glossterm> by default. For more
|
|
information about securing your environment, refer to the
|
|
<link xlink:href="http://docs.openstack.org/sec/">OpenStack
|
|
Security Guide</link>.</para>
|
|
</note>
|
|
<para>Proceed to network configuration for the example
|
|
<link linkend="basics-networking-neutron">OpenStack Networking (neutron)
|
|
</link> or <link linkend="basics-networking-nova">legacy
|
|
networking (nova-network)</link> architecture.</para>
|
|
<xi:include href="section_basics-networking-neutron.xml"/>
|
|
<xi:include href="section_basics-networking-nova.xml"/>
|
|
</section>
|