SDN Lab 7$ L2 Switching and Queue using OFDPA Switch and ovs-ofctl

Posted on 2017-01-09

(Working…)

Environment

Switch
- IP: 192.168.11.2
- Hardware
  - Model
    - Edgecore AS5712-54X
- Software
  - ONL version
    - ONL-2.0.0-ONL-OS-DEB8-2016-12-22.1828-604af0c-AMD64-INSTALLED-INSTALLER
  - OF-DPA version
    - ofdpa_3.0 EA3
  - You need launch ofappagent first. If you dont know how to start it. Please refer OF-DPA with ONL Cheat Sheet
Contorl VM
- IP: 192.168.11.1
- OpenvSwitch
  - 2.6.9

Topology

+--------+   Port+-----------------------+Port   +--------+
|        |      1|    AS5712-54X         |2      |        |
| Host A +-------+    ONL: 2.0.0 Deb8    +-------+ Host B |
|        |       |    OFDPA: 3.0.3 EA2   |       |        |
+--------+       +-----------------------+       +--------+

L2 Switching

ovs-ofctl

Flow tables ID

Table Name	Table ID
Ingress Port	0
Port DSCP Trust	5
Port PCP Trust	6
Tunnel DSCP Trust	7
Tunnel PCP Trust	8
Injected OAM	9
VLAN	10
VLAN 1	11
Ingress Maintenance Point	12
MPLS L2 Port	13
MPLS DSCP Trust	15
MPLS PCP Trust	16
L2 Policer	18
L2 Policer Actions	19
Termination MAC	20
L3 Type	21
MPLS 0	23
MPLS 1	24
MPLS 2	25
MPLS-TP Maintenance Point	26
MPLS L3 Type	27
MPLS Label Trust	28
MPLS Type	29
Unicast Routing	30
Multicast Routing	40
Bridging	50
Policy ACL	60
Color Based Actions	65
Egress VLAN	210
Egress VLAN 1	211
Egress Maintenance Point	226
Egress DSCP PCP Remark	230
Egress TPID	235

Setting

1
2

References

OpenvSwitch ovs-ofctl and OF-DPA

Posted on 2017-01-06 Edited on 2017-03-21

Goal

Remote control and management OF-DPA via ovs-ofctl

OF-DPA with ONL Cheat Sheet

Posted on 2017-01-04

Environment

Hardware
- Model
  - Edgecore AS5712-54X
Software
- ONL version
  - ONL-2.0.0-ONL-OS-DEB8-2017-07-18.1642-40fc82b
- OF-DPA version
  - ofdpa_3.0 EA5

Upgrade ONOS Cluster

Posted on 2016-05-14 Edited on 2017-04-19 In sdn

upgrade~

ONS 2016 之旅

Posted on 2016-04-23

Open Networking Summit 大進擊

PKI Lab$2 Create Multiple domain (UCC) SSL Certificate

Posted on 2015-07-27

採用

來建立 PKI CA, 必需要有 Root CA, 可參考 [PKI Lab$1 Create Root CA](http://blog.pichuang.com.tw/pki-lab-1-create-root-ca/) 做建立的動作


### Step by Step
- Setting vars for Root CA
> export KEY_SIZE=2048  
export CA_EXPIRE=365  
export KEY_EXPIRE=365  
export KEY_COUNTRY="TW"  
export KEY_PROVINCE="Taiwan"  
export KEY_CITY="HsinChu"  
export KEY_ORG="Night9 Studios"  
export KEY_EMAIL="[email protected]"  
export KEY_OU="www.night9.cc"  
export KEY_NAME=""  
export KEY_CN="*.night9.cc"  

  - [Source](https://github.com/pichuang/easy-rsa/blob/ucc/vars)
  - 重點在於 ```KEY_CN```, 此設定可以 match ```www.night9.cc``` ```roan.night9.cc```, 但不能 match ```night9.cc

Create UCC Key

source ./vars
./build-key-server *.night9.cc
<enter>…<enter>
Check Root CA key and crt

ls -la ./keys/*.night9.cc.{key,crt}
- 建議將 *.night9.cc 做個改名的動作
Check *.night9.cc crt Info

openssl x509 -in *.night9.crt -text -noout
Show

Reference

PKI Lab$3 Create Single domain SSL Certificate

Posted on 2015-07-27

採用

來建立 PKI CA, 必需要有 Root CA, 可參考 [PKI Lab$1 Create Root CA](http://blog.pichuang.com.tw/pki-lab-1-create-root-ca/) 做建立的動作


### Step by Step
- Setting vars for Root CA
> export KEY_SIZE=2048  
export CA_EXPIRE=365  
export KEY_EXPIRE=365  
export KEY_COUNTRY="TW"  
export KEY_PROVINCE="Taiwan"  
export KEY_CITY="HsinChu"  
export KEY_ORG="Night9 Studios"  
export KEY_EMAIL="[email protected]"  
export KEY_OU="www.night9.cc"  
export KEY_NAME=""  
export KEY_CN="roan.night9.cc"  

  - [Source](https://github.com/pichuang/easy-rsa/blob/single/vars)
  - 重點在於 ```KEY_CN```, 此設定可以 match ```roan.night9.cc```, 但不能 match ```night9.cc``` ```xxx.night9.cc

Create Key

source ./vars
./build-key-server roan.night9.cc
<enter>…<enter>
Check key and crt

ls -la ./keys/roan.night9.cc.{key,crt}
Check roan.night9.cc crt Info

openssl x509 -in roan.night9.crt -text -noout
Show

Reference

PKI Lab$1 Create Root CA

Posted on 2015-07-26

採用

來建立 PKI CA


### Step by Step
- Setting vars for Root CA
> export KEY_SIZE=2048  
export CA_EXPIRE=3650  
export KEY_EXPIRE=3650  
export KEY_COUNTRY="TW"  
export KEY_PROVINCE="Taiwan"  
export KEY_CITY="HsinChu"  
export KEY_ORG="Night9 Studios"  
export KEY_EMAIL="[email protected]"  
export KEY_OU="www.night9.cc"  
export KEY_NAME=""  
export KEY_CN="Night9 Local Authority Root CA"  

  - [Source](https://github.com/pichuang/easy-rsa/blob/root_ca/vars)
  - 上面的寫法參考許多現有的 Root CA 的寫法, 特別是 ```KEY_CN KEY_NAME