Create a RBAC network

Step-by-step guide

1. Create the network
   
   

   neutron net-create services-vlan600 --provider:network_type vlan --router:external true --provider:physical_network datacentre --provider:segmentation_id 600

2. Remove the default RBAC policy
   
   

   openstack network rbac list
   openstack network rbac delete a238fc36-ba47-4e03-bcf1-5c4680fdb654

3. Create a new project restricted RBAC policy
   
   

   openstack network rbac create 25a8096b-dbc3-4dd8-9722-071357dba153 --type network --target-project 3598428b5ccb4b91832ddc455eb98c76 --action access_as_external

4. Define a Pool of Floating IP Addresses
   
   

   neutron subnet-create --allocation-pool start=192.168.200.1,end=192.168.255.254 --gateway 192.168.128.2 --disable-dhcp services-vlan600 192.168.128.0/17
   +-------------------+------------------------------------------------------+
   | Field             | Value                                                |
   +-------------------+------------------------------------------------------+
   | allocation_pools  | {"start": "192.168.200.1", "end": "192.168.255.254"} |
   | cidr              | 192.168.128.0/17                                     |
   | created_at        | 2017-10-19T17:56:57Z                                 |
   | description       |                                                      |
   | dns_nameservers   |                                                      |
   | enable_dhcp       | False                                                |
   | gateway_ip        | 192.168.128.2                                        |
   | host_routes       |                                                      |
   | id                | 44ebc5f8-b813-47f5-a470-bb81e2f06ae7                 |
   | ip_version        | 4                                                    |
   | ipv6_address_mode |                                                      |
   | ipv6_ra_mode      |                                                      |
   | name              |                                                      |
   | network_id        | 25a8096b-dbc3-4dd8-9722-071357dba153                 |
   | project_id        | 3598428b5ccb4b91832ddc455eb98c76                     |
   | revision_number   | 2                                                    |
   | service_types     |                                                      |
   | subnetpool_id     |                                                      |
   | tags              |                                                      |
   | tenant_id         | 3598428b5ccb4b91832ddc455eb98c76                     |
   | updated_at        | 2017-10-19T17:56:57Z                                 |
   +-------------------+------------------------------------------------------

Related articles