[Openstack] Creating a FWaaS 'destroy's the router

Tyler Bishop tyler.bishop at beyondhosting.net
Fri Sep 16 18:21:55 UTC 2016


You should have the driver specified in the configs:
vpn_agent.ini
------
[DEFAULT]
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver

[ipsec]
enable_detailed_logging = True

[pluto]

[vpnagent]
vpn_device_driver = neutron_vpnaas.services.vpn.device_drivers.libreswan_ipsec.LibreSwanDriver 





neutron_vpnaas.conf
------
[DEFAULT]

[service_providers]
service_provider=VPN:libreswan:neutron_vpnaas.services.vpn.service_drivers.ipsec.IPsecVPNDriver:default



If you are not the intended recipient of this transmission you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

----- Original Message -----
From: "Turbo Fredriksson" <turbo at bayour.com>
To: "Tyler Bishop" <tyler.bishop at beyondhosting.net>
Cc: "openstack List" <openstack at lists.openstack.org>
Sent: Friday, September 16, 2016 2:18:10 PM
Subject: Re: [Openstack] Creating a FWaaS 'destroy's the router

On Sep 14, 2016, at 3:20 PM, Tyler Bishop wrote:

> Can you post your vpn_agent.ini neutron_vpnaas.conf and neutron.conf?

# egrep -v '^#|^$' vpn_agent.ini
[DEFAULT]
[ipsec]
[pluto]
[strongswan]
[vpnagent]

# egrep -v '^#|^$' neutron_vpnaas.conf
[DEFAULT]
[service_providers]

# egrep -v '^#|^$' neutron.conf
[DEFAULT]
bind_host = 0.0.0.0
auth_strategy = keystone
core_plugin = neutron.plugins.ml2.plugin.Ml2Plugin
service_plugins = router,metering,lbaas,firewall
default_availability_zones = nova
dns_domain = openstack.domain.tld.
external_dns_driver = designate
allow_overlapping_ips = True
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
interface_driver = openvswitch
agent_down_time = 120
debug = false
rpc_backend = rabbit
[agent]
root_helper = sudo neutron-rootwrap /etc/neutron/rootwrap.conf
report_interval = 60
availability_zone = nova
[cors]
[cors.subdomain]
[database]
connection = mysql+pymysql://neutron:MYSQL_NEUTRON_PASSWORD@openstack.domain.tld/neutron
use_db_reconnect = true
[keystone_authtoken]
http_connect_timeout = 5
http_request_max_retries = 3
region_name = europe-london
auth_host = openstack.domain.tld
auth_port = 35357
auth_protocol = http
admin_user = neutron
admin_password = USER_NEUTRON_PASSWORD
admin_tenant_name = service
[matchmaker_redis]
[nova]
region_name = europe-london
auth_url = http://openstack.domain.tld:5000/v3
auth_type = v3password
password = USER_NEUTRON_PASSWORD
project_domain_name = default
project_name = service
tenant_name = service
user_domain_name = default
username = neutron
[oslo_concurrency]
lock_path = /var/lock/neutron
[oslo_messaging_amqp]
[oslo_messaging_notifications]
driver = neutron.services.metering.drivers.iptables.iptables_driver.IptablesMeteringDriver
[oslo_messaging_rabbit]
rabbit_host = openstack.domain.tld
rabbit_userid = openstack
rabbit_password = RABBITMQ_OPENSTACK_PASSWORD
[oslo_policy]
[quotas]
[ssl]
[designate]
url = http://openstack.domain.tld:9001/v2
admin_auth_url = http://openstack.domain.tld:35357/v3
admin_username = neutron
admin_password = USER_NEUTRON_PASSWORD
admin_tenant_name = service
allow_reverse_dns_lookup = False
ipv4_ptr_zone_prefix_size = 24




More information about the Openstack mailing list