From 5d6de8fc8bda6ceafac98002e443008cd711114c Mon Sep 17 00:00:00 2001 From: Pierre Riteau Date: Tue, 10 Dec 2019 16:41:25 +0100 Subject: [PATCH] Add example to Bridges and VLANs section Change-Id: I45c64dfe6a28f73b3c4f7ac4444e49b8488e55f7 --- doc/source/configuration/network.rst | 29 +++++++++++++++++++++++++++- 1 file changed, 28 insertions(+), 1 deletion(-) diff --git a/doc/source/configuration/network.rst b/doc/source/configuration/network.rst index 7ebe15f15..1d8f45c9d 100644 --- a/doc/source/configuration/network.rst +++ b/doc/source/configuration/network.rst @@ -390,7 +390,7 @@ addition to the bond, as a different named network. Configuring VLAN Interfaces --------------------------- -A VLAN interface may be configured by setting the ``interface`` attribute of a +A VLAN interface may be configured by setting the ``interface`` attribute of a network to the name of the VLAN interface. The interface name must be of the form ``.``. @@ -420,6 +420,33 @@ VLAN to be forwarded by the bridge, whereas adding a VLAN interface to an Ethernet or bond interface that is a bridge member port will prevent tagged traffic for that VLAN being forwarded by the bridge. +For example, if you are bridging ``eth1`` to ``breth1`` and want to access VLAN +1234 as a tagged VLAN from the host, while still allowing Neutron to access +traffic for that VLAN via Open vSwitch, your setup should look like this: + +.. code-block:: console + + $ sudo brctl show + bridge name bridge id STP enabled interfaces + breth1 8000.56e6b95b4178 no p-breth1-phy + eth1 + $ sudo ip addr show | grep 1234 | head -1 + 10: breth1.1234@breth1: mtu 1500 qdisc noqueue state UP group default qlen 1000 + +It should **not** look like this: + +.. code-block:: console + + $ sudo brctl show + bridge name bridge id STP enabled interfaces + breth1 8000.56e6b95b4178 no p-breth1-phy + eth1 + $ sudo ip addr show | grep 1234 | head -1 + 10: eth1.1234@eth1: mtu 1500 qdisc noqueue state UP group default qlen 1000 + +This second configuration may be desirable to prevent specific traffic, e.g. of +the internal API network, from reaching Neutron. + Domain Name Service (DNS) Resolver Configuration ================================================