1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
|
<?xml version="1.0" encoding="ISO-8859-1"?>
<chapter id="inband_management">
<title>In-band Management Example Use-case</title>
<para>In the case of an NFV Access device installed on a network with
limited access, In-band management can be a solution to manage the device
and to pass data traffic (through only one physical interface). This example
use-case will show how to enable the In-band management on the NFV Access
device and to access a VNF on the same physical interface.</para>
<section id="inband_mg_uc_preq">
<title>Prerequisites</title>
<para>This use-case requires the following network configuration:</para>
<itemizedlist>
<listitem>
<para>1 x Network Interface for WAN and management.</para>
</listitem>
<listitem>
<para>1 x Network Interface for LAN.</para>
</listitem>
</itemizedlist>
<para>In-band management activation is done by creating a special bridge
which manages all traffic from the WAN interface. The active physical port
of the device (used by the device manager to communicate with the uCPE
Manager) will be connected to the In-band management bridge.</para>
<para>Once the In-band management bridge is activated, communication to
the uCPE Manager will be reactivated, passing through the bridge.</para>
<note>
<para>No other physical port for In-band management can be used.</para>
</note>
<para>For further details, please see <xref
linkend="vnf_fortigate" /><remark>Are these references still
valid?</remark>.</para>
</section>
<section id="inband_mg_fortivnf_uc">
<title>In-band management activation for FortiGate VNF
Instantiation</title>
<figure>
<title>NFV Access In-band management solution setup</title>
<mediaobject>
<imageobject>
<imagedata align="center" fileref="images/uc_ibm_solution_test.png"
scale="55" />
</imageobject>
</mediaobject>
</figure>
<section id="inband_examuc_setup">
<title>Use-case Setup</title>
<para><emphasis role="bold">Configuring Network Interfaces on uCPE
devices:</emphasis></para>
<orderedlist>
<listitem>
<para>Create an In-band management WAN Bridge:</para>
<itemizedlist spacing="compact">
<listitem>
<para>Select the <literal>Device</literal> menu.</para>
</listitem>
<listitem>
<para>In the Configuration tab select
<literal>OpenVSwitch.</literal></para>
</listitem>
<listitem>
<para>Select <literal>Bridges</literal> and click
<literal>Add</literal>.</para>
</listitem>
<listitem>
<para>Use <literal>dpdkWAN</literal> as the
<literal>ovs-bridge-type</literal>.</para>
</listitem>
</itemizedlist>
</listitem>
<listitem>
<para>Bind the physical port which will be used for LAN access to
<literal>dpdk</literal>:</para>
<itemizedlist spacing="compact">
<listitem>
<para>Select the <literal>Device</literal> menu.</para>
</listitem>
<listitem>
<para>In the Configuration tab select
<literal>OpenVSwitch</literal>.</para>
</listitem>
<listitem>
<para>Select the <literal>Host Interfaces</literal> menu and
click <literal>Add</literal>.</para>
</listitem>
<listitem>
<para>Use <literal>dpdk</literal> as the
<literal>ovs-bridge-type</literal>.</para>
</listitem>
</itemizedlist>
</listitem>
<listitem>
<para>Create a LAN Bridge:</para>
<itemizedlist spacing="compact">
<listitem>
<para>Select the <literal>Device</literal>.</para>
</listitem>
<listitem>
<para>In the Configuration menu select
<literal>OpenVSwitch</literal>.</para>
</listitem>
<listitem>
<para>Open the <literal>Bridges</literal> menu and click
<literal>Add</literal>.</para>
</listitem>
</itemizedlist>
<para>At this step the following bridges should exist:</para>
<figure>
<title>Bridges</title>
<mediaobject>
<imageobject>
<imagedata align="center" fileref="images/uc_ibm_br2.png"
scale="65" />
</imageobject>
</mediaobject>
</figure>
<note>
<para>The WAN port of the very first VNF instantiated on the
device must be connected to the
<literal>ibm-wan-br</literal>bridge. All other VNFs must be
connected in chain with the first VNF.</para>
</note>
</listitem>
</orderedlist>
<para><emphasis role="bold">Onboarding the VNFs:</emphasis></para>
<orderedlist>
<listitem>
<para>Select the <literal>Device</literal>.</para>
</listitem>
<listitem>
<para>Select the <literal>VNF</literal> menu.</para>
</listitem>
<listitem>
<para>In the <literal>Descriptors</literal> menu, choose the
<literal>VNF Package</literal> option.</para>
</listitem>
<listitem>
<para>Browse and select the Fortigate bundle you require, before
pressing the <literal>Send</literal> button.</para>
</listitem>
</orderedlist>
<para><emphasis role="bold">Instantiating the VNFs:</emphasis></para>
<orderedlist>
<listitem>
<para>Select the <literal>Device</literal>.</para>
</listitem>
<listitem>
<para>Select the <literal>VNF</literal> menu.</para>
</listitem>
<listitem>
<para>Choose the <literal>Instances</literal> option, select the VNF
configuration you desire and press <literal>Add</literal>.</para>
</listitem>
<listitem>
<para>Browse and select the Fortigate bundle you require, before
pressing the <literal>Send</literal> button.</para>
</listitem>
</orderedlist>
<figure>
<title>Instantiate the FortiGate VNF</title>
<mediaobject>
<imageobject>
<imagedata align="center"
fileref="images/uc_ibm_fg_instantiation.png" scale="65" />
</imageobject>
</mediaobject>
</figure>
</section>
<section id="test_fortvnf_inband">
<title>Testing the Use-case</title>
<para>Once the VNF is instantiated, the setup is complete and ready for
testing. Connect the test machine to the LAN port. It will receive an IP
address from the FortiGate VNF and be able to access the
internet.</para>
<para>At this stage, three types of traffic are passing through the WAN
port on the same IP address:</para>
<itemizedlist>
<listitem>
<para>Device management traffic from the uCPE Manager.</para>
</listitem>
<listitem>
<para>FortiGate management interface traffic from a web
browser.</para>
</listitem>
<listitem>
<para>Data traffic from the LAN to the internet.</para>
</listitem>
</itemizedlist>
<para>If you have access from the uCPE Manager to the device as shown
above, this demonstrates that device management traffic passes through
the In-band management WAN bridge successfully.</para>
<para>To access the management interface of the VNF, connect from a web
browser to the public IP address of the device e.g.
<literal>https://<IP></literal>. From a Test machine connected on
the LAN port, try a test ping to the internet e.g. "ping
8.8.8.8".</para>
</section>
</section>
</chapter>
|
