128T VNF Router Example Use-case The 128T Networking Platform (128T) natively provides network-based security, control, and insight across data centers, wide-area networks (WAN), and edge locations for enterprises, service providers, and cloud companies alike.
Prerequisites The following are needed for this example use case: 1 in band management port for device management. 1 in band management port for 128T VNF. 1 WAN interface for 128T. 1 LAN interface for 128T.
128T VNF Router
128T VNF Router Setup Overview
Use-case Setup Configuring Network Interfaces on uCPE devices: Log into the uCPE Manager with both username and password values: admin. Add the Kontron me1100 uCPE device into the uCPE Manager: Devices -> Manage -> Add. Fill in the required fields with the following data: Device Details Field Value Type Enea universal CPE Release 1.0 Name me1100 IP/DNS Address Dynamic IP received by device from DHCP server (E.g.: 172.24.12.74). Description Kontron Target 1 SSH Port 830 SSH User Name root Password null OK Green status indicates connection with uCPE device was established.
In order to add the device on the map: Right-Click on Map -> Place Device -> me1100. Configure the virtualization infrastructure for 128T VNF by creating three OVS bridges and a host interface. Select the me1100 device then: Configuration -> OpenVSwitch -> Bridges -> Add. Fill in the required fields for each bridge with the following data from each table: ibm_br Bridge Details Field Value id <autogenerated - do not change> Name ibm_br ovs-bridge-type dpdkWan mgmt-address Provide the IP address of the uCPE Manager machine (E.g. 172.24.3.109). mgmt-port 830 Create The system will automatically select the physical interface that has access to the uCPE Manager.
vnf_mgmt_br Bridge Details Field Value id <autogenerated - do not change> Name vnf_mgmt_br ovs-bridge-type vnfMgmt vnf-mgmt-address 10.0.0.1 Create
lan_br Bridge Details Field Value id <autogenerated - do not change> Name lan_br ovs-bridge-type canonical + Name: enp4s0f1 OK Create
Add the Host Interface by selecting the me1100 device, then Configuration -> OpenVSwitch -> Host Interfaces -> Add. Fill in the required fields with the following data: Host Interface Details Field Value Source enp4s0f1. The only interface available for LAN connection. type dpdk networking-type dpdk dpdk-type vfio-pci Create <interface enp4s0f1 ready to be used in a LAN bridge.>
Onboarding the VNFs: Onboard the VM Image through VNF -> Descriptors -> On-board -> VM Image, and fill in the required fields with the following values: VM Image Details Field Value VM image file centos_128t_with_ci.qcow2 Image format QCOW2 VNF Type Name 128T Description 128T Router Version 1.0 Memory in MB 8192. More memory can be allocated if required (<28672). Num. of CPUs 2. More CPUs can be reserved if required (<15). Interfaces -> + Name: mgmt Interfaces -> + Name: wan Interfaces -> + Name: lan Cloud Init -> Cloud-Init Datasource ISO Cloud Init -> Cloud-Init Disk Type cdrom Properties -> + Name: vnfMgmtIpAddress. Value: 10.0.0.2 Properties -> + Name: internalMgmtPort. Value: 443 Properties -> + Name: externalMgmtPort. Value: 60001 Onboard <Wait for message: VNF package onboarded successfully> Close
HTTPS access (443) can be changed with another type of access. Please consult official 128T documentation and make sure the 128T VNF is configured to accept another type of connection before changing the port number. externalMgmtPort (60001) represents the external port on which the user can access the VNF management interface via HTTPS. Another port can be selected if needed. There are no other changes required or components affected by this change. vnfMgmtIpAddress (10.0.0.2) represents the IP address of the management interface of the 128T VNF. Changing this value requires an update to the 128T configuration to match the new IP address. Instantiating the VNFs: Instantiate the 128T VNF by selecting the me1100 device, then VNF -> Instances -> Add. Fill in the required fields with the following values: 128T VNF Instantiation Field Value Name 128T_me1100_1 VNF Type 128T VNFD Version 1.0 Flavour Canonical uCPE Device me1100 Cloud Init File centos_128t_internet_ci.iso Domain Update Script Interfaces ID IF Name mgmt (dpdk) Bridge: vnf_mgmt_br wan (dpdk) Bridge: ibm_br lan (dpdk) Bridge: lan_br Create
Testing the Use-case In order to access the web interface of the 128T VNF, open a browser from a machine connected on the same network with the WAN port of the me1100 uCPE device and browse to: https://<public_me1100_WAN_IP>:60001. Log in using the following credentials: Username: admin Password: 128Tadmin In order to validate the data path, connect a test machine to the LAN physical port, assign the static IP and a route:> ifconfig eth3 192.168.64.2 netmask 255.255.255.0 > ip route add default via 192.168.64.1 dev eth3 > ping 8.8.8.8For data path validation, it may be required to generate a new cloud-init image to match your network configuration. Please check Appendix A: How to create 128T cloud-init iso image (day-0 configuration), for more details.
Use-case Clean-up In order to remove the setup created previously all components need to be deleted in reverse order: Select the me1100 uCPE device -> VNF -> Instances -> 128T -> Delete. Select the me1100 uCPE device -> Configuration -> OpenVSwitch -> Bridges. Select all bridges -> Delete. Select the me1100 uCPE device -> Configuration -> OpenVSwitch -> Host Interfaces. Select all interfaces -> Delete. VNF -> Descriptors, select all bundles -> Offboard.