From 3cbe167b1ca6c4bbeaf6e7c28b6aca05de1bd440 Mon Sep 17 00:00:00 2001 From: Adrian Calianu Date: Thu, 31 Jan 2019 10:07:38 +0100 Subject: getting started: Add demo use case for in-band management Change-Id: I713c1cf1718e2f915875e0e25699b54cfabb9822 Signed-off-by: Adrian Calianu --- .../doc/demo_usecases.xml | 303 ++++++++++++++++++++- .../doc/images/uc_ibm_br.png | Bin 0 -> 7778 bytes .../doc/images/uc_ibm_br2.png | Bin 0 -> 13517 bytes .../doc/images/uc_ibm_dpdk_int_bind.png | Bin 0 -> 6872 bytes .../doc/images/uc_ibm_fg_instantiation.png | Bin 0 -> 23383 bytes .../doc/images/uc_ibm_fortigate_onboard.png | Bin 0 -> 7298 bytes .../doc/images/uc_ibm_lanbr.png | Bin 0 -> 12255 bytes .../doc/images/uc_ibm_solution.png | Bin 0 -> 100793 bytes .../doc/images/uc_ibm_solution_test.png | Bin 0 -> 134590 bytes 9 files changed, 302 insertions(+), 1 deletion(-) create mode 100755 doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_br.png create mode 100755 doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_br2.png create mode 100755 doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_dpdk_int_bind.png create mode 100755 doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_fg_instantiation.png create mode 100755 doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_fortigate_onboard.png create mode 100755 doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_lanbr.png create mode 100755 doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_solution.png create mode 100755 doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_solution_test.png diff --git a/doc/book-enea-nfv-access-getting-started/doc/demo_usecases.xml b/doc/book-enea-nfv-access-getting-started/doc/demo_usecases.xml index 1686427..35d72af 100644 --- a/doc/book-enea-nfv-access-getting-started/doc/demo_usecases.xml +++ b/doc/book-enea-nfv-access-getting-started/doc/demo_usecases.xml @@ -1894,4 +1894,305 @@ Run: tail -f /opt/testpmd-out - + +
+ In-band Management + + In the case of an NFV Access device installed on a network with + limited access, In-band management can be a solution to manage the device + and to pass data traffic (through only one physical interface). This demo + use-case will show how to enable the In-band management on the NFV Access + device and to access a VNF on the same physical interface. + +
+ NFV Access In-band management solution setup + + + + + + +
+ + Setup uses the following network configuration: + + + + 1 x Network Interface for WAN and management. + + + + 1 x Network Interface for LAN. + + + + For prerequisites and further details, please see and . + +
+ In-band management activation for FortiGate VNF + Instantiation + + In-band management activation is done by creating a special bridge + which manages all traffic from the WAN interface. The active physical + port of the device (used by the device manager to communicate with the + uCPE Manager) will be connected to the In-band management bridge. Once + the In-band management bridge is activated, communication to the uCPE + Manager will be reactivated, passing through the bridge. + + + No other physical port for In-band management can be + used. + + + + + Create an In-band management WAN Bridge: + + + + Select the Device menu. + + + + In the Configuration tab select + OpenVSwitch. + + + + Select Bridges and click + Add. + + + + Use dpdkWAN as the + ovs-bridge-type. + + + +
+ Create In-band management WAN bridge + + + + + + +
+ + + + Bind the physical port which will be used for LAN access to + dpdk: + + + + Select the Device menu. + + + + In the Configuration tab select + OpenVSwitch. + + + + Select the Host Interfaces menu and + click Add. + + + + Use dpdk as the + ovs-bridge-type. + + + +
+ Bind LAN physical port to dpdk + + + + + + +
+ + + + Create a LAN Bridge: + + + + Select the Device. + + + + In the Configuration menu select + OpenVSwitch. + + + + Open the Bridges menu and click + Add. + + + +
+ Create LAN bridge + + + + + + +
+ + At this step the following bridges should exist: + +
+ Bridges + + + + + + +
+ + + The WAN port of the very first VNF instantiated on the + device must be connected to the ibm-wan-br + bridge. All other VNFs must be connected in chain with + the first VNF. + + + + + Onboard the first VNF and instantiate it on the device: + + + + Select the Device. + + + + Select the VNF menu. + + + + In the Descriptors menu, choose the + VNF Package option. + + + + Browse and select the Fortigate bundle you require, before + pressing the Send button. + + + +
+ Onboard Fortigate VNF + + + + + + +
+ + + + Add the VNF instance: + + + + Select the Device. + + + + Select the VNF menu. + + + + Choose the Instances option, select the + VNF configuration you desire and press + Add. + + + + Browse and select the Fortigate bundle you require, before + pressing the Send button. + + + +
+ Instantiate Fortigate VNF + + + + + + +
+ + + + Once the VNF is instantiated, the setup is complete and ready for + testing. Connect the test machine to the LAN port. It will receive an IP + address from the Fortigate VNF and be able to access the + internet. +
+ +
+ Testing the Fortigate VNF In-band management activation + +
+ Test setup + + + + + + +
+ + At this stage, three types of traffic are passing through the WAN + port on the same IP address: + + + + Device management traffic from uCPE Manager. + + + + Fortigate management interface traffic from a web + browser. + + + + Data traffic from the LAN to the internet. + + + + Having access from the uCPE Manager to the device as shown above, + demonstrates that device management traffic passes through the in-band + management WAN bridge successfully. + + To access the management interface of the VNF, connect from a web + browser to the public IP address of the device e.g. + https://<IP>. From a Test machine connected on + LAN port, try a test ping to the internet e.g. "ping 8.8.8.8". +
+
+ \ No newline at end of file diff --git a/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_br.png b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_br.png new file mode 100755 index 0000000..f28678b Binary files /dev/null and b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_br.png differ diff --git a/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_br2.png b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_br2.png new file mode 100755 index 0000000..72f8178 Binary files /dev/null and b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_br2.png differ diff --git a/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_dpdk_int_bind.png b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_dpdk_int_bind.png new file mode 100755 index 0000000..ea1fef7 Binary files /dev/null and b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_dpdk_int_bind.png differ diff --git a/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_fg_instantiation.png b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_fg_instantiation.png new file mode 100755 index 0000000..9b4d020 Binary files /dev/null and b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_fg_instantiation.png differ diff --git a/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_fortigate_onboard.png b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_fortigate_onboard.png new file mode 100755 index 0000000..6fa40bd Binary files /dev/null and b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_fortigate_onboard.png differ diff --git a/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_lanbr.png b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_lanbr.png new file mode 100755 index 0000000..18e074e Binary files /dev/null and b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_lanbr.png differ diff --git a/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_solution.png b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_solution.png new file mode 100755 index 0000000..10ed27d Binary files /dev/null and b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_solution.png differ diff --git a/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_solution_test.png b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_solution_test.png new file mode 100755 index 0000000..7006068 Binary files /dev/null and b/doc/book-enea-nfv-access-getting-started/doc/images/uc_ibm_solution_test.png differ -- cgit v1.2.3-54-g00ecf