Neutron - VPNaas配置
VPNaas简介
VPNass是neutron的vpn服务,目前社区提供了基于openswan实现的IPsec VPN以及基于硬件实现CiscoCsrIPsec VPN
VPNaas配置
yum install openstack-neutron-vpn-agent.noarch -y yum install libreswan -y vim /etc/neutron/neutron.conf # 添加vpnaas模块 [DEFAULT] service_plugins = router,vpnaas [service_providers] service_provider = VPN:Vpn:neutron.services.vpn.service_drivers.ipsec.IPsecVPNDriver:default vim /etc/neutron/vpn_agent.ini [DEFAULT] # VPN-Agent configuration file # Note vpn-agent inherits l3-agent, so you can use configs on l3-agent also interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver [vpnagent] vpn_device_driver=neutron.services.vpn.device_drivers.ipsec.OpenSwanDriver [ipsec] ipsec_status_check_interval=60 vim /etc/neutron/rootwrap.d/vpnaas.filters # 添加权限管理文件,不然运行会报权限不足 [Filters] ip: IpFilter, ip, root ip_exec: IpNetnsExecFilter, ip, root openswan: CommandFilter, ipsec, root service neutron-server restart # 重新加载neutron.conf配置文件 service neutron-vpn-agent start # 启动vpn-agent服务 # 我实验的openstack平台使用了neutron dvr模式,创建vpn的时候一直报错
参考链接
http://www.ibm.com/developerworks/cn/cloud/library/1311_zhanghua_openstacknetwork2/
http://blog.csdn.net/lynn_kong/article/details/16866855
https://gist.github.com/cloudnull/8851787#file-neutron-vpnaas-fwaas-lbaas-configsetup-rst
https://www.mirantis.com/blog/mirantis-openstack-express-vpn-service-vpnaas-step-step/
本文出自 “the-way-to-cloud” 博客,请务必保留此出处http://iceyao.blog.51cto.com/9426658/1596339
郑重声明:本站内容如果来自互联网及其他传播媒体,其版权均属原媒体及文章作者所有。转载目的在于传递更多信息及用于网络分享,并不代表本站赞同其观点和对其真实性负责,也不构成任何其他建议。