Home

# apt-get install openswan neutron-plugin-vpn-agent

Create file /etc/neutron/rootwrap.d/vpnaas.filters

# cat > /etc/neutron/rootwrap.d/vpnaas.filters << EOF
[Filters]

ip: IpFilter, ip, root
ip_exec: IpNetnsExecFilter, ip, root
openswan: CommandFilter, ipsec, root

EOF

Create file /etc/neutron/vpn_agent.ini:

# cat > /etc/neutron/vpn_agent.ini << EOF
[DEFAULT]
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver

[vpnagent]
vpn_device_driver=neutron.services.vpn.device_drivers.ipsec.OpenSwanDriver

[ipsec]
ipsec_status_check_interval=60

EOF