3.13.6 Filtering the OpenFlow trace log in a CSV file..............................................................

47

3.13.7 Changing the OpenFlow trace interval .......................................................................

48

3.14 OpenFlow classes display.................................................................................................

49

3.14.1 About OpenFlow classes............................................................................................

49

3.14.2 Controller enforcement levels for OpenFlow classes.......................................................

50

3.14.3 OpenFlow classes display details...............................................................................

50

3.14.4 Changing the enforcement levels for OpenFlow classes.................................................

51

3.15 Packet listeners display.....................................................................................................

51

3.15.1 Packet listeners display details....................................................................................

51

4 License Registration and Activation.............................................................

52

4.1 Overview.........................................................................................................................

52

4.1.1 License registration and activation process.....................................................................

52

4.1.2 License types, usage, and expiration.............................................................................

52

4.2 Preparing for license registration.........................................................................................

53

4.2.1 Verifying registration prerequisites................................................................................

53

4.2.2 Identifying the install ID..............................................................................................

53

4.3 Registering and activating a license....................................................................................

53

4.4 Registering your license and obtaining a license key.............................................................

53

4.5 Activating a license on the controller...................................................................................

58

4.6 Managing licenses...........................................................................................................

59

4.6.1 Transferring licenses...................................................................................................

59

4.6.1.1 Uninstalling licenses to prepare for transfer.............................................................

60

4.6.1.2 Transferring licenses............................................................................................

60

5 SDN Controller authentication ...................................................................

63

5.1 SDN Controller security guidelines ......................................................................................

63

5.2 SDN Controller authentication ...........................................................................................

63

5.3 Creating SDN Controller keystore and truststore....................................................................

63

5.4 SDN Controller keystore and truststore locations and passwords .............................................

64

5.5 Configuration encryption ...................................................................................................

65

5.6 Openflow Controller TLS ...................................................................................................

65

5.6.1 Creating Openflow Controller keystore and truststore .....................................................

65

5.6.2 Openflow Controller keystore and truststore locations and passwords...............................

66

5.7 REST authentication...........................................................................................................

66

5.7.1 Openstack Keystone ..................................................................................................

67

5.7.2 Service and admin tokens ..........................................................................................

68

5.8 Controller code verification ...............................................................................................

68

5.8.1 Adding certificates to the jar-signing truststore ..............................................................

68

5.8.2 Running the SDN Controller Without Jar-Signing Validation ...........................................

68

5.9 Revoking Trust .................................................................................................................

69

5.9.1 Revoking trust via truststore .........................................................................................

69

5.9.2 Revoking trust via CRL ...............................................................................................

69

5.10 SDN administrative REST API ............................................................................................

69

5.11 Virgo admin UI access .....................................................................................................

70

5.12 Virgo console access .......................................................................................................

70

5.13 JMX console ...................................................................................................................

71

5.14 Security practices ............................................................................................................

71

5.14.1 Security procedure....................................................................................................

71

5.14.2 Recommended administrative rules ............................................................................

72

6 Hybrid mode for controlling packet-forwarding.............................................

73

6.1 Overview.........................................................................................................................

73

6.2 Viewing and changing the hybrid mode configuration...........................................................

73

6.3 Coordinating controller hybrid mode and OpenFlow switch settings.........................................

74

6.3.1 Supporting hybrid mode on OpenFlow switches.............................................................

74

Contents 5