Contents

1   Introduction

This document describes how to configure external tenant Border Gateway (BGW) and Firewall (FW) connections to the Cloud Execution Environment (CEE) region. This guideline provides a high-level overview, as the BGW or FW is not part of the CEE region, so the actual BGW present at the actual deployment is not known.

Note:  

For more information about the CEE region configuration, refer to the Configuration File Guide.

2   CEE as BSP Tenant

This section provides guidelines for the case where Neutron is configured to use a CMX ML2 mechanism driver.

In BSP 8100 based deployments, CEE operates as a BSP tenant. BSP uses VRs to provide external network connectivity for BSP tenants, as illustrated in fig-L3BSPeps Figure 1. Therefore there is no direct L2 connectivity between tenant VMs in CEE and BGW front ports.

In this use case of CEE as BSP tenant, "BGW" is the equivalent of "BSP external network equipment", as used in the BSP documentation.

Note:  

fig-L3BSPeps Figure 1 illustrates an example of the possible setups for external connectivity. For more options and extensive guideline, refer to BSP External Network Connectivity, Reference [1].

2.1   Prerequisites

This section describes the prerequisites that must be fulfilled before external connectivity can be achieved.

2.1.1   Required Hardware and Software

For the hardware and software required by BGW, refer to the relevant BSP documentation.

2.1.2   Documents

Before starting the configuration procedure, ensure that the relevant BSP information is available. Refer to BSP documents BSP External Network Connectivity, Reference [1] and BSP Tenant Network Connectivity, Reference [2].

2.1.3   Conditions

Before the configuration can be performed, the following conditions must apply:

• The BGW is installed and properly configured.
• Physical connectivity between BSP and BGW is in place.
• Physical connectivity between BGW and FW is in place.
• The VLAN ID plan of the CEE region must contain a single range of VLANs used for the CEE region tenant external connectivity, called "provider networks" in the document.

  Note:  

  Tenant and provider network ranges need to be configured.

  For more information on the range, refer to the Configuration File Guide.

  
  
• The CEE region is installed successfully.

2.2   L3 Connection to BGW

Do the following:

1. Create the connectivity between the BGW and BSP VRs according to the VLAN ID plan of the CEE region. For more information, refer to the BSP External Network Connectivity, Reference [1].
2. Create the connectivity between BSP VRs and the provider networks. Follow the VLAN ID plan of the CEE region and the BSP Tenant Network Connectivity, Reference [2].
3. Create the routing between the BGW and the provider networks.

Reference List

[1] BSP External Network Connectivity, 2/1553-APP 111 01 Uen
[2] BSP Tenant Network Connectivity, 3/1553-APP 111 01 Uen