Download - Contrail Lab Manual
![Page 1: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/1.jpg)
15
Contrail Lab Manual Contrail Specific Service Chaining
![Page 2: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/2.jpg)
P a g e | 2
![Page 3: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/3.jpg)
P a g e | 3 Contents Guide for ICLD’s contrail solution ....................................................................................................................................................... 4
Overview ......................................................................................................................................................................................... 4
Lab 1: Learning the Contrail specific tasks for service chaining ..................................................................................................... 5
Step 1: Create images in Open stack .......................................................................................................................................... 5
Step 2: Create Flavors. ................................................................................................................................................................ 6
Step 3:Create networks for our VMs. ......................................................................................................................................... 7
Step 4: Nowlaunch two instances .............................................................................................................................................. 8
Step5: Now switch to Contrail dashboard and add VSRX template ........................................................................................... 9
Step 6: Create a service instance ..............................................................................................................................................10
Step 7: Create a Policy in Contrail. ...........................................................................................................................................11
Step 8: Apply the policy to your Networks for both VMs.........................................................................................................12
Step 9: Now open your VMs in console and ping each other to verify the connectivity between your VMs. Connectivity is dependent on your VSRX configurations. ................................................................................................................................13
![Page 4: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/4.jpg)
P a g e | 4
Guide for ICLD’s contrail solution
Overview Juniper Contrail is an end to end IT solution based on the NFV/SDN applications. Apart from the fancy technological
terms and jargon, this product has a great potential. It not only provides the service providers the agility & scalability to manage the infrastructure but provides the customers to see, manage and scale their virtual infrastructure themselves.
The power that Contrail brings to the table is the feature called “service chaining”. The concept that sets Juniper apart from its competitors. It’s a simple concept that leads to the true meaning of the term VIaaS (Virtual Infrastructure as a service)
The whole model of Contrail is based upon the idea of reducing the OPEX & CAPEX. Service chaining means using the industry proven virtual appliances such as Firewalls, load balancers, application servers in a virtual server farm to enhance the capability of Contrail to scale up the infrastructure at any time.
Service Chaining diagram
Two different VMs
Firewall/Load balancers/Application servers etc
![Page 5: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/5.jpg)
P a g e | 5 Lab 1: Learning the Contrail specific tasks for service chaining
Let’s Begin Registering with ICLD will provide you a username and password to test our services for a limited amount of time. You will be able to create instances and perform contrail specific tasks like service chaining.
This is a step by step guide to help you create a use case of providing Juniper’s VSRX as a service through contrail.
Step 1: Create images in Open stack
Verify that we have 2 images as shown below. In this case,one is for our VMs and other one for Juniper’s virtual SRX
![Page 6: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/6.jpg)
P a g e | 6 Step 2: Create Flavors. This is basically a templates used to spin VMs. We can define number of VCPUs and RAM to be allocated for our VMs in it
![Page 7: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/7.jpg)
P a g e | 7 Step 3:Create networks for our VMs.
Here are the two networks that we have created. Right-network and left-network as shown below.
![Page 8: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/8.jpg)
P a g e | 8 Step 4: Nowlaunch two instances
Here are the two instances that we have created.
Next, console into your VMs to verify that they are both up. If they have Linux OS then execute ‘ifconfig’ command to check whether both have the correct IP addresses from our two networks.
![Page 9: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/9.jpg)
P a g e | 9
Step5: Now switch to Contrail dashboard and add VSRX template
Here we can see that our template is created that’s named‘vsrx-template’
![Page 10: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/10.jpg)
P a g e | 10
Step 6: Create a service instance
A service instance (Firefly Perimeter) is created, as shown below
Navigate to Openstack dashboard to see a new instance alsocreated there
![Page 11: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/11.jpg)
P a g e | 11
Step 7: Create a Policy in Contrail. In Networking>Policies, we can either block or unblock protocols like ICMP, SSH etc. from any port, between any networks.
For the purpose of this example we are letting all protocols to pass between our networks.
We see a policy named ‘new’ is created for us.
![Page 12: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/12.jpg)
P a g e | 12 Step 8: Apply the policy to your Networks for both VMs
We can see that policy ‘new’ is attached to both our networks
![Page 13: Contrail Lab Manual](https://reader033.vdocument.in/reader033/viewer/2022050807/58a305a31a28abbe5a8c1aea/html5/thumbnails/13.jpg)
P a g e | 13
Step 9: Now open your VMs in console and ping each other to verify the connectivity between your VMs. Connectivity is dependent on your VSRX configurations.
Thank You