Creating a tenant Neutron network
Now that we have our OpenStack Network services running, we can use these to create networks within our OpenStack environment. Networks are created for each tenant and we can use these to connect to our VMs. Neutron networks can either be private or shared. When a Neutron network is private, only the operators and instances of that tenant can utilize these networks. When they are marked as shared, all instances can attach to this shared network so it is important to utilize this shared network feature carefully to ensure security between tenants. When using shared networks, we implement Security Group rules to ensure the traffic flow matches our security requirements.
Getting ready
Ensure you have a suitable client available for using Neutron. If you are using the accompanying Vagrant environment, you can use the controller
node. This has the python-neutronclient
package that provides the neutron
command-line client.
If you created this node with Vagrant, you...