ovs-vsctl add-port br2 ens190 trunk=4092
ovs-vsctl add-port br2 ens224 trunk=4092
sudo ovs-vsctl set Port vnet8 tag=101
sudo ovs-vsctl set Port vnet9 tag=102
sudo ovs-vsctl set Port vnet10 tag=103
sudo ovs-vsctl set Port first_br tag=103
sudo ovs-vsctl clear Port second_br tag
sudo ovs-vsctl set Port third_br trunks=101,102
ovs-vsctl add-br OVS-test //添加名OVS-test的网桥
ovs-vsctl del-br OVS-test //删除名OVS-test的网桥
ovs-vsctl list-br 列出全部网桥
ovs-vsctl list-ports OVS-test //列出网桥包含的port, port是添加到网桥上的端口，可以是聚合口，Interface是物理接口
ovs-vsctl add-port OVS-test ens192 添加端口到网桥上
ovs-vsctl add-port OVS-test ens224 添加端口到网桥上
ovs-vsctl del-port OVS-test ens192 删除网桥上的端口
ovs-vsctl port-to-br ens192 端口属于的网桥
ovs-vsctl set port ens192 tag=309 //ens192 access vlan 309
ovs-vsctl set port ens192 trunk=4092 // ens192 trunk vlan 3,4,5
ovs-vsctl set port ens224 trunk=4092 // ens192 trunk vlan 3,4,5
ovs-vsctl show //查看网桥信息
ovs-appctl fdb/show OVS-test //查看MAC地址
ovs-ofctl add-flow OVS-test "ip, nw_dst=10.6.12.18, actions=drop" //添加流表
ovs-ofctl add-flow OVS-test "
ovs-ofctl show OVS-test //查看接口ID
ovs-ofctl add-flow OVS-test "arp, in_port=1,
ovs-vsctl set port ens224 trunk=3001,3002,3003,3004
端口不需要属于任何VLAN，openflow可以正常工作
外部接口ID6，内部接口ID5
从外到内ARP组，优先级3000
IP=241,VLAN 3001
ovs-ofctl add-flow OVS-test "cookie=0x1, priority=3000, arp,in_port=6,dl_vlan=4092,arp_tpa=192.168.254.241 actions=mod_vlan_vid:3001,output:5"
ovs-ofctl add-flow OVS-test "cookie=0x2, priority=3000, arp,in_port=5,dl_vlan=3001,arp_spa=192.168.254.241 actions=mod_vlan_vid:4092,output:6"
IP=27,VLAN 3002
ovs-ofctl add-flow OVS-test "cookie=0x3, priority=3000, arp,in_port=6,dl_vlan=4092,arp_tpa=192.168.254.27 actions=mod_vlan_vid:3002,output:5"
ovs-ofctl add-flow OVS-test "cookie=0x4, priority=3000, arp,in_port=5,dl_vlan=3002,arp_spa=192.168.254.27 actions=mod_vlan_vid:4092,output:6"
IP=25,VLAN 3003
ovs-ofctl add-flow OVS-test "cookie=0x5, priority=3000, arp,in_port=6,dl_vlan=4092,arp_tpa=192.168.254.25 actions=mod_vlan_vid:3003,output:5"
ovs-ofctl add-flow OVS-test "cookie=0x6, priority=3000, arp,in_port=5,dl_vlan=3003,arp_spa=192.168.254.25 actions=mod_vlan_vid:4092,output:6"
IP=26,VLAN 3004
ovs-ofctl add-flow OVS-test "cookie=0x7, priority=3000, arp,in_port=6,dl_vlan=4092,arp_tpa=192.168.254.26 actions=mod_vlan_vid:3004,output:5"
ovs-ofctl add-flow OVS-test "cookie=0x8, priority=3000, arp,in_port=5,dl_vlan=3004,arp_spa=192.168.254.26 actions=mod_vlan_vid:4092,output:6"
从外到内SSH组，优先级3010
IP=241,VLAN 3001
ovs-ofctl add-flow OVS-test "cookie=0x9, priority=3010, tcp,in_port=6,dl_vlan=4092,nw_src=192.168.0.0/16,nw_dst=192.168.254.241,tp_dst
=22, actions=mod_vlan_vid:3001,output:5"
ovs-ofctl add-flow OVS-test "cookie=0xA, priority=3010, tcp,in_port=5,dl_vlan=3001,nw_src=192.168.254.241,nw_dst=192.168.0.0/16,tp_src=22, actions=mod_vlan_vid:4092,output:6"
IP=27,VLAN 3002
ovs-ofctl add-flow OVS-test "cookie=0xB, priority=3010, tcp,in_port=6,dl_vlan=4092,nw_src=192.168.0.0/16,nw_dst=192.168.254.27,tp_dst=22, actions=mod_vlan_vid:3002,output:5"
ovs-ofctl add-flow OVS-test "cookie=0xC, priority=3010, tcp,in_port=5,dl_vlan=3002,nw_src=192.168.254.27,nw_dst=192.168.0.0/16,tp_src=22, actions=mod_vlan_vid:4092,output:6"
IP=25,VLAN 3003
ovs-ofctl add-flow OVS-test "cookie=0xD, priority=3010, tcp,in_port=6,dl_vlan=4092,nw_src=192.168.0.0/16,nw_dst=192.168.254.25,tp_dst=22, actions=mod_vlan_vid:3003,output:5"
ovs-ofctl add-flow OVS-test "cookie=0xE, priority=3010, tcp,in_port=5,dl_vlan=3003,nw_src=192.168.254.25,nw_dst=192.168.0.0/16,tp_src=22, actions=mod_vlan_vid:4092,output:6"
IP=26,VLAN 3004
ovs-ofctl add-flow OVS-test "cookie=0x10, priority=3010, tcp,in_port=6,dl_vlan=4092,nw_src=192.168.0.0/16,nw_dst=192.168.254.26,tp_dst=22, actions=mod_vlan_vid:3004,output:5"
ovs-ofctl add-flow OVS-test "cookie=0x11, priority=3010, tcp,in_port=5,dl_vlan=3004,nw_src=192.168.254.26,nw_dst=192.168.0.0/16,tp_src=22, actions=mod_vlan_vid:4092,output:6"
从外到内DNS组，优先级3020，LocalDNS向外请求包含在里面，优先级3020
由外到内：
ovs-ofctl add-flow OVS-test "cookie=0x12, priority=3020, udp,in_port=6,dl_vlan=4092,nw_dst=192.168.254.241,tp_dst=53, actions=mod_vlan_vid:3001,output:5"
ovs-ofctl add-flow OVS-test "cookie=0x13, priority=3020, udp,in_port=5,dl_vlan=3001,nw_src=192.168.254.241,tp_src=53, actions=mod_vlan_vid:4092,output:6"
由内到外：
ovs-ofctl add-flow OVS-test "cookie=0x14, priority=3020, udp,in_port=5,dl_vlan=3001,nw_src=192.168.254.241,tp_dst=53, actions=mod_vlan_vid:4092,output:6"
ovs-ofctl add-flow OVS-test "cookie=0x15, priority=3020, udp,in_port=6,dl_vlan=4092,nw_dst=192.168.254.241,tp_src=53, actions=mod_vlan_vid:3001,output:5"
DNS互访组，优先级3030
241<->27:VLAN3001,VLAN3002
ARP:
ovs-ofctl add-flow OVS-test "cookie=0x16, priority=3030, arp,in_port=5,dl_vlan=3001,arp_spa=192.168.254.241,arp_tpa=192.168.254.27 actions=mod_vlan_vid:3002,in_port"
ovs-ofctl add-flow OVS-test "cookie=0x17, priority=3030, arp,in_port=5,dl_vlan=3002,arp_tpa=192.168.254.241,arp_spa=192.168.254.27 actions=mod_vlan_vid:3001,in_port"
DNS:
ovs-ofctl add-flow OVS-test "cookie=0x18, priority=3030, udp,in_port=5,dl_vlan=3001,nw_src=192.168.254.241,nw_dst=192.168.254.27,tp_dst=53, actions=mod_vlan_vid:3002,in_port"
ovs-ofctl add-flow OVS-test "cookie=0x19, priority=3030, udp,in_port=5,dl_vlan=3002,nw_src=192.168.254.27,nw_dst=192.168.254.241,tp_src=53, actions=mod_vlan_vid:3001,in_port"
27<->25:VLAN3002,VLAN3003
ARP:
ovs-ofctl add-flow OVS-test "cookie=0x20, priority=3030, arp,in_port=5,dl_vlan=3002,arp_spa=192.168.254.27,arp_tpa=192.168.254
.25 actions=mod_vlan_vid:3003,in_port"
ovs-ofctl add-flow OVS-test "cookie=0x21, priority=3030, arp,in_port=5,dl_vlan=3003,arp_tpa=192.168.254.27,arp_spa=192.168.254.25 actions=mod_vlan_vid:3002,in_port"
DNS:
ovs-ofctl add-flow OVS-test "cookie=0x22, priority=3030, udp,in_port=5,dl_vlan=3002,nw_src=192.168.254.27,nw_dst=192.168.254.25,tp_dst=53, actions=mod_vlan_vid:3003,in_port"
ovs-ofctl add-flow OVS-test "cookie=0x23, priority=3030, udp,in_port=5,dl_vlan=3003,nw_src=192.168.254.25,nw_dst=192.168.254.27,tp_src=53, actions=mod_vlan_vid:3002,in_port"
27<->26:VLAN3002,VLAN3004
ARP:
ovs-ofctl add-flow OVS-test "cookie=0x24, priority=3030, arp,in_port=5,dl_vlan=3002,arp_spa=192.168.254.27,arp_tpa=192.168.254.26 actions=mod_vlan_vid:3004,in_port"
ovs-ofctl add-flow OVS-test "cookie=0x25, priority=3030, arp,in_port=5,dl_vlan=3004,arp_tpa=192.168.254.27,arp_spa=192.168.254.26 actions=mod_vlan_vid:3002,in_port"
DNS:
ovs-ofctl add-flow OVS-test "cookie=0x26, priority=3030, udp,in_port=5,dl_vlan=3002,nw_src=192.168.254.27,nw_dst=192.168.254.26,tp_dst=53, actions=mod_vlan_vid:3004,in_port"
ovs-ofctl add-flow OVS-test "cookie=0x27, priority=3030, udp,in_port=5,dl_vlan=3004,nw_src=192.168.254.26,nw_dst=192.168.254.27,tp_src=53, actions=mod_vlan_vid:3002,in_port"
如果重启操作系统后，OpenvSwitch没有启动，进入/usr/local/share/openvswitch/scripts文件，执行ovs-ctl start启动
本文来源：https://www.2haoxitong.net/k/doc/ca42fdbda4e9856a561252d380eb6294dc882249.html
