Networking Option 1: Provider networks¶

Configure the Linux bridge agent¶

The Linux bridge agent builds layer-2 (bridging and switching) virtual networking infrastructure for instances including VXLAN tunnels for private networks and handles security groups.

• Edit the /etc/neutron/plugins/ml2/linuxbridge_agent.ini file and complete the following actions:

  • In the [linux_bridge] section, map the public virtual network to the public physical network interface:

    [linux_bridge]
    physical_interface_mappings = public:PUBLIC_INTERFACE_NAME
    

    Replace PUBLIC_INTERFACE_NAME with the name of the underlying physical public network interface.

  • In the [vxlan] section, disable VXLAN overlay networks:

    [vxlan]
    enable_vxlan = False
    

  • In the [agent] section, enable ARP spoofing protection:

    [agent]
    ...
    prevent_arp_spoofing = True
    

  • In the [securitygroup] section, enable security groups and configure the Linux bridge iptables firewall driver:

    [securitygroup]
    ...
    enable_security_group = True
    firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
    

Return to Networking compute node configuration.