1 # Create logical switch dmz
 2 ovn-nbctl ls-add dmz
 3 ovn-nbctl lsp-add dmz dmz-vm10
 4 ovn-nbctl lsp-set-addresses dmz-vm10 "02:ac:10:ff:01:30 172.16.255.130"
 5 ovn-nbctl lsp-set-port-security dmz-vm10 "02:ac:10:ff:01:30 172.16.255.130"
 6  
 7 # Create set dhcp service
 8 dmzDhcp="$(ovn-nbctl create DHCP_Options cidr=172.16.255.128/26 \
 9 options="\"server_id\"=\"172.16.255.129\" \"server_mac\"=\"02:ac:10:ff:01:29\" \
10 \"lease_time\"=\"3600\" \"router\"=\"172.16.255.129\"")"
11 ovn-nbctl lsp-set-dhcpv4-options dmz-vm10 $dmzDhcp
12  
13 # Create logical router
14 ovn-nbctl lr-add tenant1
15 ovn-nbctl lrp-add tenant1 tenant1-dmz 02:ac:10:ff:01:29 172.16.255.129/26
16 ovn-nbctl lsp-add dmz dmz-tenant1
17 ovn-nbctl lsp-set-type dmz-tenant1 router
18 ovn-nbctl lsp-set-addresses dmz-tenant1 02:ac:10:ff:01:29
19 ovn-nbctl lsp-set-options dmz-tenant1 router-port=tenant1-dmz
20 ovn-nbctl set Logical_Router tenant1 options:chassis=$chassis_id
21  
22 # Creaet instance in namespace
23 ovs-vsctl add-port br-int vm10 -- set interface vm10 type=internal
24 ip link set vm10 address 02:ac:10:ff:01:30
25 ip netns add vm10
26 ip link set vm10 netns vm10
27 ovs-vsctl set Interface vm10 external_ids:iface-id=dmz-vm10
28 ip netns exec vm10 dhclient vm10
29 ip netns exec vm10 ip addr show vm10
30 ip netns exec vm10 ip route show
31   
32 # Create outside switch connecting tenant1 router
33 ovn-nbctl lrp-add tenant1 tenant1-outside 02:0a:7f:00:01:29 192.168.80.100/24
34 ovn-nbctl ls-add outside
35 ovn-nbctl lsp-add outside outside-tenant1
36 ovn-nbctl lsp-set-type outside-tenant1 router
37 ovn-nbctl lsp-set-addresses outside-tenant1 02:0a:7f:00:01:29
38 ovn-nbctl lsp-set-options outside-tenant1 router-port=tenant1-outside
39   
40 # Create provider bridge attached eth1
41 ovs-vsctl add-br br-eth1
42 ovs-vsctl add-port br-eth1 eth1
43  
44 # Create bridge mapping for eth1. map network name "dataNet" to br-eth1
45 ovs-vsctl set Open_vSwitch . external-ids:ovn-bridge-mappings=dataNet:br-eth1
46   
47 # Create localnet port on ‘outside‘. set the network name to "dataNet"
48 ovn-nbctl lsp-add outside outside-localnet
49 ovn-nbctl lsp-set-addresses outside-localnet unknown
50 ovn-nbctl lsp-set-type outside-localnet localnet
51 ovn-nbctl lsp-set-options outside-localnet network_name=dataNet
52   
53 # Create NAT rule
54 ovn-nbctl -- --id=@nat create nat type="snat" logical_ip=172.16.255.128/26 external_ip=192.168.80.100 -- add logical_router tenant1 nat @nat