Hello,

 

Fix this, please. I had to use sed to make a replacement to be able to force
openvswitch to run after the network (wicked in openSUSE) service. 


Guide


1. Configure firewalld

firewall-cmd --permanent --zone=public --set-target=default
firewall-cmd --set-default-zone public
firewall-cmd --permanent --zone=public --change-interface=eth0
firewall-cmd --permanent --zone=public --add-interface=br-ex
firewall-cmd --add-port=1337/tcp --permanent --zone=public
firewall-cmd --runtime-to-permanent
firewall-cmd --reload
firewall-cmd --list-all
systemctl restart firewalld.service

2. Install OpenvSwitch

zypper install -y openvswitch

3. Copy ifcfg-eth0 (ifcfg-enp0s25) NIC config to ifcfg-br-ex Virtual bridge
config

cp /etc/sysconfig/network/ifcfg-eth0 /etc/sysconfig/network/ifcfg-br-ex

4. Configure primary interface like below while replacing eth0 with the name
of your physical interface.

sed -i 's/dhcp/none/g' /etc/sysconfig/network/ifcfg-eth0

5. Configure virtual bridge 


sed -i 's/auto/hotplug/g' /etc/sysconfig/network/ifcfg-br-ex


6. Change services: openvswitch.service, ovs-vswitchd.service and
ovsdb-server.service

sed -i 's/Before=network.target network.service/#Before=network.target
network.service/g' /usr/lib/systemd/system/openvswitch.service
sed -i 's/PartOf=network.target/#PartOf=network.target/g'
/usr/lib/systemd/system/openvswitch.service
sed -i 's/Before=network.target network.service/#Before=network.target
network.service/g' /usr/lib/systemd/system/ovs-vswitchd.service
sed -i 's/Before=network.target network.service/#Before=network.target
network.service/g' /usr/lib/systemd/system/ovsdb-server.service 
sed -i 's/After=syslog.target network-pre.target/After=syslog.target
network-pre.target wicked.service/g'
/usr/lib/systemd/system/ovsdb-server.service
sed -i 's/After=local-fs.target dbus.service isdn.service rdma.service
network-pre.target SuSEfirewall2_init.service systemd-udev-settle.service
openvswitch.service/After=local-fs.target dbus.service isdn.service
rdma.service network-pre.target SuSEfirewall2_init.service
systemd-udev-settle.service/g' /usr/lib/systemd/system/wickedd.service

7. reload daemon

systemctl daemon-reload

8. Configure OpenvSwitch service


systemctl restart ovs-vswitchd.service
systemctl restart ovsdb-server.service
systemctl restart openvswitch.service
systemctl restart wicked.service


9. Create open v switch bridge and add eth0 interface to the virtual bridge.
Add the eth0 physical interface to the br-ex bridge in openVswitch.

ovs-vsctl add-br br-ex
ovs-vsctl add-port br-ex eth0

10. List available OVS bridges

ovs-vsctl show

11. Check the status of the virtual bridge br-ex

ovs-vsctl show | grep -B 7 br-ex

12. Check IP addresses

ip a

13. Check routing table

ip r

14. Check running services

systemctl status wicked.service
systemctl status openvswitch.service
systemctl status ovsdb-server.service
systemctl status ovs-vswitchd.service

15. Check the content of these files. They should look like these below.
Bear in mind that each time you change the default zone for the intergace in
firewalld the variable for ZONE is changing. 

cat /etc/sysconfig/network/ifcfg-eth0
BOOTPROTO='none'
STARTMODE='auto'
ZONE=public

cat /etc/sysconfig/network/ifcfg-br-ex
BOOTPROTO='dhcp'
STARTMODE='hotplug'
ZONE=public

 

 

Sent from my Fujitsu LIFEBOOK E756  

Serdecznie pozdrawiam / With best regards, 

Adrian Ambroziak

Quality Assurance Specialist

Research & Development

Mobile: +48 786 874 936



Fujitsu Technology Solutions Sp. z. o. o.

Fuzja, ul. Milionowa 4

93-102 Lódz, Poland

E-mail:  <mailto:adrian.ambroz...@fujitsu.com> adrian.ambroz...@fujitsu.com

Web:  <https://fujitsu.com/> fujitsu.com

Company details:  <https://ts.fujitsu.com/imprint.html>
ts.fujitsu.com/imprint

 

This communication contains information that is confidential, proprietary in
nature and/or privileged.  It is for the exclusive use of the intended
recipient(s). If you are not the intended recipient(s) or the person
responsible for delivering it to the intended recipient(s), please note that
any form of dissemination, distribution or copying of this communication is
strictly prohibited and may be unlawful. If you have received this
communication in error, please immediately notify the sender and delete the
original communication. Thank you for your cooperation. 

Please be advised that neither Fujitsu, its affiliates, its employees or
agents accept liability for any errors, omissions or damages caused by
delays of receipt or by any virus infection in this message or its
attachments, or which may otherwise arise as a result of this e-mail
transmission.

 

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss

Reply via email to