Настройка OpenVSwitch в COD-е на SW-COD

hostnamectl set-hostname sw-cod.au.team; exec bash

useradd net_admin

• • задаём пароль пользователю

passwd net_admin

•  Добавляем пользователя в группу wheel:

usermod -aG wheel net_admin

• Настраиваем sudo для пользователя:
  

echo "net_admin ALL=(ALL:ALL) NOPASSWD: ALL" >> /etc/sudoers

•  Проверить:

sw-cod login: net_admin 
Password: 
[net_admin@sw-cod ~]$ sudo hostname -f
sw-cod.au.team
[net_admin@sw-cod ~]$ exit
выход

ip addr add 172.16.1.0/23 dev ens19
ip route add 0.0.0.0/0 via 172.16.1.254
echo "nameserver 77.88.8.8" > /etc/resolv.conf

apt-get update && apt-get install -y openvswitch

systemctl enable --now openvswitch
sed -i "s/OVS_REMOVE=yes/OVS_REMOVE=no/g" /etc/net/ifaces/default/options
reboot

echo "TYPE=eth" > /etc/net/ifaces/ens19/options
cp /etc/net/ifaces/ens19/options /etc/net/ifaces/ens20
cp /etc/net/ifaces/ens19/options /etc/net/ifaces/ens21
cp /etc/net/ifaces/ens19/options /etc/net/ifaces/ens22
cp /etc/net/ifaces/ens19/options /etc/net/ifaces/enp2s29
cp /etc/net/ifaces/ens19/options /etc/net/ifaces/enp3s12
ИЛИ
cp -r /etc/net/ifaces/ens{19,20}/ 
cp -r /etc/net/ifaces/ens{19,21}/ 
cp -r /etc/net/ifaces/ens{19,22}/ 
cp -r /etc/net/ifaces/ens19 /etc/net/ifaces/enp2s29 
cp -r /etc/net/ifaces/ens19 /etc/net/ifaces/enp3s12
systemctl restart network

• Проверить:

[root@sw-cod ~]# ip -c -br a
lo               UNKNOWN        127.0.0.1/8 ::1/128 
ens19            UP             fe80::be24:11ff:febf:d8fb/64 
ens20            UP             fe80::be24:11ff:fe41:8167/64 
ens21            UP             fe80::be24:11ff:fe0d:fa1f/64 
ens22            UP             fe80::be24:11ff:fe76:cab8/64 
enp2s29          UP             fe80::be24:11ff:fe7e:9a42/64 
enp3s12          UP             fe80::be24:11ff:fefd:469d/64 

•  Создаём коммутатор с именем sw-cod:

ovs-vsctl add-br sw-cod

• Добавляем все интерфейсы в коммутатор sw-cod:

ovs-vsctl add-port sw-cod ens19
ovs-vsctl add-port sw-cod ens20
ovs-vsctl add-port sw-cod ens21
ovs-vsctl add-port sw-cod ens22
ovs-vsctl add-port sw-cod enp2s29
ovs-vsctl add-port sw-cod enp3s12

•  Проверить:

[root@sw-cod ~]# ovs-vsctl show
43b9c49d-4803-4df5-9b65-bd8efab074d0
    Bridge sw-cod
        Port ens6
            Interface enp2s29
        Port sw-cod
            Interface sw-cod
                type: internal
        Port ens1
            Interface ens19
        Port ens3
            Interface ens21
        Port ens4
            Interface ens22
        Port ens5
            Interface enp3s12
        Port ens2
            Interface ens20
    ovs_version: "3.3.8"
[root@sw-cod ~]# 

• Создаём порт управления для назначения IP-адреса:

mkdir /etc/net/ifaces/mgmt

cat <<EOF > /etc/net/ifaces/mgmt/options
TYPE=ovsport
BOOTPROTO=static
CONFIG_IPv4=yes
BRIDGE=sw-cod
EOF

echo "172.16.1.0/23" > /etc/net/ifaces/mgmt/ipv4address
echo "default via 172.16.1.254" > /etc/net/ifaces/mgmt/ipv4route
echo "search au.team" > /etc/net/ifaces/mgmt/resolv.conf
echo "nameserver 10.1.1.10" >> /etc/net/ifaces/mgmt/resolv.conf
systemctl restart network

[root@sw-cod ~]# ip -c -br -4 a
lo               UNKNOWN        127.0.0.1/8 
mgmt             UNKNOWN        172.16.1.0/23 
[root@sw-cod ~]# ip -c r
default via 172.16.1.254 dev mgmt 
172.16.0.0/23 dev mgmt proto kernel scope link src 172.16.1.0 
[root@sw-cod ~]# cat /etc/resolv.conf
# Generated by resolvconf
# Do not edit manually, use
# /etc/net/ifaces/<interface>/resolv.conf instead.
search au.team
nameserver 10.1.1.10
[root@sw-cod ~]# ping -c3 77.88.8.8
PING 77.88.8.8 (77.88.8.8) 56(84) bytes of data.
64 bytes from 77.88.8.8: icmp_seq=1 ttl=54 time=71.8 ms
64 bytes from 77.88.8.8: icmp_seq=2 ttl=54 time=70.3 ms
64 bytes from 77.88.8.8: icmp_seq=3 ttl=54 time=68.6 ms

--- 77.88.8.8 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 68.591/70.221/71.815/1.316 ms
[root@sw-cod ~]#