fuel-plugin-nsxv/doc/user/source/configuration.rst

Configuration

Switch to Networks tab of the Fuel web UI and click on Settings/Other section, the plugin checkbox enabled by default.

Several plugins input fields refer to MoRef ID (Managed Object Reference ID), these object IDs can be obtained via Managed Object Browser which is located on the vCenter host, e.g. https://hostname.yourdomain.org/mob

Plugin contains the following settings:

1. NSX Manager hostname (or IP) -- if you are going to use hostname in this textbox be sure that your OpenStack controller will be able to resolve it. Add necessary DNS servers in Host OS DNS Servers section. NSX Manager must be connected to vCenter server which you specified on VMware tab.

   OpenStack Controller must have L3 connectivity with NSX Manager through Public network.

2. NSX Manager user and password for access.

3. Datacenter MoRef ID -- ID of Datacenter where NSX Edge nodes will be deployed.

4. Resource pool MoRef ID -- resource pool for NSX Edge nodes deployment.

5. Datastore MoRef ID -- datastore for NSX Edge nodes.

6. External portgroup MoRef ID -- portgroup through which NSX Edge nodes get connectivity with physical network.

7. Transport zone MoRef ID -- transport zone for VXLAN logical networks.

   Note

   This ID can be fetched using NSX Manager API https://nsx-manager.yourdomain.org/api/2.0/vdn/scopes

8. Distributed virtual switch MoRef ID -- ID of vSwitch connected to Edge cluster.

9. NSX backup Edge pool -- size of NSX Edge nodes and size of Edge pool, value must follow format: <edge_type>:[edge_size]:<min_edges>:<max_edges>.

   edge_type can take the following values: service or vdr (service and distributed edge, respectively).

   NSX service nodes provide such services as DHCP, DNS, firewall, NAT, VPN, routing and load balancing.

   NSX vdr nodes performs distributed routing and bridging.

   edge_size can take following values: compact, large (default value if omitted), xlarge, quadlarge.

   min_edges and max_edges defines minimum and maximum amount of NSX Edge nodes in pool.

   Consider following table that describes NSX Edge types:

   Edge size	Edge VM parameters
   compact	1 vCPU 512 MB vRAM
   large	2 vCPU 1024 MB vRAM
   quadlarge	4 vCPU 1024 MB vRAM
   xlarge	6 vCPU 8192 MB vRAM

   Consider following example values:

   service:compact:1:2,vdr:compact:1:3

   service:xlarge:2:6,service:large:4:10,vdr:large:2:4

10. Enable HA for NSX Edges -- if you enable this option NSX Edges will be deployed in active/standby pair on different ESXi hosts.

11. Bypass NSX Manager certificate verification -- disable this option if you want Neutron NSX plugin to verify NSX Manager security certificate. CA certificate file setting will appear providing an option to upload CA certificate which emitted NSX Manager certificate.

    To enable Nova metadata service, set the following settings must be set:

12. Metadata portgroup MoRef ID -- portgroup MoRef ID for metadata proxy service.

13. Metadata proxy IP addresses -- comma separated IP addresses used by Nova metadata proxy service.

14. Management network netmask -- management network netmask for metadata proxy service.

15. Management network default gateway -- management network gateway for metadata proxy service.

16. Floating IP ranges -- dash separated IP addresses allocation pool from external network, e.g. "start_ip_address-end_ip_address".

17. External network CIDR -- network in CIDR notation that includes floating IP ranges.

18. Gateway -- default gateway for external network, if not defined, first IP address of the network is used.

19. Internal network CIDR -- network in CIDR notation for use as internal.

20. DNS for internal network -- comma separated IP addresses of DNS server for internal network.

    If you tick Additional settings checkbox following options will become available for configuration:

21. Task status check interval -- asynchronous task status check interval, default is 2000 (millisecond).

22. Maximum tunnels per vnic -- specify maximum amount of tunnels per vnic, possible range of values 1-110 (20 is used if no other value is provided).

23. API retries -- maximum number of API retries (10 by default).

24. Enable SpoofGuard -- option allows to control behaviour of port-security feature that prevents traffic flow if IP address of VM that was reported by VMware Tools does not match source IP address that is observed in outgoing VM traffic (consider the case when VM was compromised).

25. Tenant router types -- ordered list of preferred tenant router types (default value is shared, distributed, exclusive).

    • shared -- multiple shared routers may own one edge VM.
    • exclusive -- each router own one edge VM.
    • distributed -- same as exclusive, but edge is created as distributed logical router. VM traffic get routed via DLR kernel modules on each ESXi host.

26. Exclusive router size -- size of edge for exclusive router (value must be one of compact, large, quadlarge or xlarge).

27. Edge user -- user that will be created on edge VMs for remote login.

28. Edge password -- password for edge VMs. It must match following rules:

    • not less 12 characters (max 255 chars)
    • at least 1 upper case letter
    • at least 1 lower case letter
    • at least 1 number
    • at least 1 special character

    Warning

    Plugin cannot verify that password conforms security policy. If you enter password that does not match policy, Neutron server will be not able to create routers and deployment process will stop, because NSX will not permit creating edge nodes with password that does not match security policy.

29. DHCP lease time -- DHCP lease time in seconds for VMs. Default value is 86400 (24 hours).

30. Coordinator URL -- URL for distributed locking coordinator.