15

Contrail Lab Manual Contrail Specific Service Chaining

P a g e | 2

P a g e | 3 Contents Guide for ICLD’s contrail solution ....................................................................................................................................................... 4

Overview ......................................................................................................................................................................................... 4

Lab 1: Learning the Contrail specific tasks for service chaining ..................................................................................................... 5

Step 1: Create images in Open stack .......................................................................................................................................... 5

Step 2: Create Flavors. ................................................................................................................................................................ 6

Step 3:Create networks for our VMs. ......................................................................................................................................... 7

Step 4: Nowlaunch two instances .............................................................................................................................................. 8

Step5: Now switch to Contrail dashboard and add VSRX template ........................................................................................... 9

Step 6: Create a service instance ..............................................................................................................................................10

Step 7: Create a Policy in Contrail. ...........................................................................................................................................11

Step 8: Apply the policy to your Networks for both VMs.........................................................................................................12

Step 9: Now open your VMs in console and ping each other to verify the connectivity between your VMs. Connectivity is dependent on your VSRX configurations. ................................................................................................................................13

P a g e | 4

Guide for ICLD’s contrail solution

Overview Juniper Contrail is an end to end IT solution based on the NFV/SDN applications. Apart from the fancy technological

terms and jargon, this product has a great potential. It not only provides the service providers the agility & scalability to manage the infrastructure but provides the customers to see, manage and scale their virtual infrastructure themselves.

The power that Contrail brings to the table is the feature called “service chaining”. The concept that sets Juniper apart from its competitors. It’s a simple concept that leads to the true meaning of the term VIaaS (Virtual Infrastructure as a service)

The whole model of Contrail is based upon the idea of reducing the OPEX & CAPEX. Service chaining means using the industry proven virtual appliances such as Firewalls, load balancers, application servers in a virtual server farm to enhance the capability of Contrail to scale up the infrastructure at any time.

Service Chaining diagram

Two different VMs

Firewall/Load balancers/Application servers etc

P a g e | 5 Lab 1: Learning the Contrail specific tasks for service chaining

Let’s Begin Registering with ICLD will provide you a username and password to test our services for a limited amount of time. You will be able to create instances and perform contrail specific tasks like service chaining.

This is a step by step guide to help you create a use case of providing Juniper’s VSRX as a service through contrail.

Step 1: Create images in Open stack

Verify that we have 2 images as shown below. In this case,one is for our VMs and other one for Juniper’s virtual SRX

P a g e | 6 Step 2: Create Flavors. This is basically a templates used to spin VMs. We can define number of VCPUs and RAM to be allocated for our VMs in it

P a g e | 7 Step 3:Create networks for our VMs.

Here are the two networks that we have created. Right-network and left-network as shown below.

P a g e | 8 Step 4: Nowlaunch two instances

Here are the two instances that we have created.

Next, console into your VMs to verify that they are both up. If they have Linux OS then execute ‘ifconfig’ command to check whether both have the correct IP addresses from our two networks.

P a g e | 9

Step5: Now switch to Contrail dashboard and add VSRX template

Here we can see that our template is created that’s named‘vsrx-template’

P a g e | 10

Step 6: Create a service instance

A service instance (Firefly Perimeter) is created, as shown below

Navigate to Openstack dashboard to see a new instance alsocreated there

P a g e | 11

Step 7: Create a Policy in Contrail. In Networking>Policies, we can either block or unblock protocols like ICMP, SSH etc. from any port, between any networks.

For the purpose of this example we are letting all protocols to pass between our networks.

We see a policy named ‘new’ is created for us.

P a g e | 12 Step 8: Apply the policy to your Networks for both VMs

We can see that policy ‘new’ is attached to both our networks

P a g e | 13

Step 9: Now open your VMs in console and ping each other to verify the connectivity between your VMs. Connectivity is dependent on your VSRX configurations.

Thank You