-
Run a simple learning switch controller:
cd /tmp/ryu
./bin/ryu-manager --verbose ryu/app/simple_switch.py
- Verify simple connectivity by logging into right ping left
ping left
Notice the printouts of the ryu simple switch controller.
-
Stop your controller by Ctrl-c and remove all your flows
sudo ovs-ofctl del-flows br0
- Make your switch into a firewall by downloading and running the appropriate Ryu controller:
wget http://www.gpolab.bbn.com/exp/OpenFlowExampleExperiment/ryu/gpo-ryu-firewall.tar.gz
tar xvfz gpo-ryu-firewall.tar.gz
cd gpo-ryu-firewall/
/tmp/ryu/bin/ryu-manager simple_firewall.py
WARNING If at some point your controller prints an error, kill it (ctrc-c) and start it again.
- Log into right and run a nc server:
nc -l 5001
- Log into left and run a nc client:
nc 10.10.11.1 5001
- Type some text in left and it should appear in right and vise versa.
- In the terminal for switch you should see messages about the flow being passed or not:
Extracted rule {'sport': '57430', 'dport': '5001', 'sip': '10.10.10.1', 'dip': '10.10.11.1'}
Allow Connection rule {'dport': '5001', 'dip': '10.10.11.1', 'sip': '10.10.10.1', 'sport': 'any'}
- CTRL-C to kill nc in each terminal.
- Run a nc server on port 5002, then 5003.
- Compare the observed behavior to the contents of ~/gpo-ryu-firewall/fw.conf. Does the behavior match the configuration file?
- Stop the Firewall controller and run a simple switch controller. Is there any traffic being blocked now? Don't forget to delete the flows after you stop the controller
- Feel free to modify the configuration file to allow more traffic.
}}}
[[BR]]
{{{
#!html
|
6. Cleanup
After you are done with the exercise and you have captured everything requested for the writeup, you should release your resources so that other experimenters can use
them. In order to cleanup your slice :
- In Flack, press the Delete button in the bottom of your canvas
- Select Delete at used managers and confirm your selection.
Wait and after a few moments all the resources will have been released and you will have an empty canvas again. Notice that your slice is still there. There is no way to delete a slice, it will be removed automatically after its expiration date, but remember that a slice is just an empty container so it doesn't take up any resources.
|
}}}
----
[[Image(GENIExperimenter/Tutorials/Graphics:tip.png, 40, left)]]
= Tips =
* Remember that you can use “ifconfig” to determine which Ethernet interface (e.g., eth0) is bound to what IP address at each of the nodes.
* In order to enable IP forwarding of packets on a node you have to execute the following command:
{{{
sudo sh -c 'echo 1 > /proc/sys/net/ipv4/ip_forward'
}}}
|