Contrail Lab Manual Contrail Specific Service Chaining 15
Page 2
Page 3 Contents Guide for ICLD s contrail solution... 4 Overview... 4 Lab 1: Learning the Contrail specific tasks for service chaining... 5 Step 1: Create images in Open stack... 5 Step 2: Create Flavors.... 6 Step 3:Create networks for our VMs.... 7 Step 4: Nowlaunch two instances... 8 Step5: Now switch to Contrail dashboard and add VSRX template... 9 Step 6: Create a service instance...10 Step 7: Create a Policy in Contrail....11 Step 8: Apply the policy to your Networks for both VMs...12 Step 9: Now open your VMs in console and ping each other to verify the connectivity between your VMs. Connectivity is dependent on your VSRX configurations....13
Page 4 Guide for ICLD s contrail solution Overview Juniper Contrail is an end to end IT solution based on the NFV/SDN applications. Apart from the fancy technological terms and jargon, this product has a great potential. It not only provides the service providers the agility & scalability to manage the infrastructure but provides the customers to see, manage and scale their virtual infrastructure themselves. The power that Contrail brings to the table is the feature called service chaining. The concept that sets Juniper apart from its competitors. It s a simple concept that leads to the true meaning of the term VIaaS (Virtual Infrastructure as a service) The whole model of Contrail is based upon the idea of reducing the OPEX & CAPEX. Service chaining means using the industry proven virtual appliances such as Firewalls, load balancers, application servers in a virtual server farm to enhance the capability of Contrail to scale up the infrastructure at any time. Service Chaining diagram Two different VMs Firewall/Load balancers/application servers etc
Page 5 Lab 1: Learning the Contrail specific tasks for service chaining Let s Begin Registering with ICLD will provide you a username and password to test our services for a limited amount of time. You will be able to create instances and perform contrail specific tasks like service chaining. This is a step by step guide to help you create a use case of providing Juniper s VSRX as a service through contrail. Step 1: Create images in Open stack Verify that we have 2 images as shown below. In this case,one is for our VMs and other one for Juniper s virtual SRX
Step 2: Create Flavors. This is basically a templates used to spin VMs. We can define number of VCPUs and RAM to be allocated for our VMs in it Page 6
Page 7 Step 3:Create networks for our VMs. Here are the two networks that we have created. Right-network and left-network as shown below.
Page 8 Step 4: Nowlaunch two instances Here are the two instances that we have created. Next, console into your VMs to verify that they are both up. If they have Linux OS then execute ifconfig command to check whether both have the correct IP addresses from our two networks.
Page 9 Step5: Now switch to Contrail dashboard and add VSRX template Here we can see that our template is created that s named vsrx-template
Page 10 Step 6: Create a service instance A service instance (Firefly Perimeter) is created, as shown below Navigate to Openstack dashboard to see a new instance alsocreated there
Page 11 Step 7: Create a Policy in Contrail. In Networking>Policies, we can either block or unblock protocols like ICMP, SSH etc. from any port, between any networks. For the purpose of this example we are letting all protocols to pass between our networks. We see a policy named new is created for us.
Page 12 Step 8: Apply the policy to your Networks for both VMs We can see that policy new is attached to both our networks
Page 13 Step 9: Now open your VMs in console and ping each other to verify the connectivity between your VMs. Connectivity is dependent on your VSRX configurations. Thank You