Provisioning additional networking

Provision additional networking for direct network access to a container or to a virtual machine.

Before you begin

As a prerequisite, deploy the Red Hat® OpenShift® Virtualization Operator within IBM Fusion HCI. For the procedure to deploy, see Deploying Red Hat OpenShift Virtualization Operator.

Procedure

  1. Define the network range and the VLAN for which the external network traffic will traverse.
    1. Log in to IBM Fusion HCI user interface.
    2. Go to Networking page and go to VLAN tab.
    3. Click Add VLAN to define a new VLAN.
    4. Select the VLAN Type as Virtualization VLAN.
    5. Add the newly Defined VLAN to the Uplink ports on the high speed switches.
      In the Edit LINK slide out panel, select value for VLANs and Save.
  2. Log in to OpenShift Container Platform web console.
  3. Go to Administration > CustomResourceDefinitions.
  4. Search for nodenetworkconfigurationpolicies.nmstate.io and click to open it.
  5. In the Instances tab, view the NNCP policy created with the previously created VLAN ID. For example, if the created VLAN ID is "2222", the NNCP policy name is "br2222-bond0-policy".
  6. Copy the bridge name. In this example, it is "br2222".
  7. Select your project or namespace and go to Networking > NetworkAttachmentDefinitions.
  8. In the NetworkAttachmentDefinitions, click Create Network Attachment Definition to create a new Network Attachment Definition specific to the desired namespace.
    You can reuse the same network attachment definitions across multiple namespaces.
  9. Select Linux bridge from the Network Type drop-down list.
    Note: When creating the NAD, include only the bridge details. Do not add VLAN information, as this disrupts VM communication.
  10. Add br2222 in the Bridge name and click Create.
  11. Check whether the Bridge Name is same as the one created by the node network policy. In this example, it is "br2222".
  12. You can now attach a second network adapter to your virtual machine at the time of network configuration, and assign it to the defined network attachment definition. It allows access to the external network.

What to do next

Make sure you delete the secondary VLAN. For steps, see Secondary VLAN detaching.