6033N/A[DEFAULT]

6033N/A# VPN-Agent configuration file

6033N/A# Note vpn-agent inherits l3-agent, so you can use configs on l3-agent also

6033N/A

6033N/A[vpnagent]

6033N/A# vpn device drivers which vpn agent will use

6033N/A# If we want to use multiple drivers, we need to define this option multiple

6033N/A# times.

6033N/A# NOTE: StrongSwan and openSwan cannot be installed at the same time. Thus, both

6033N/A# cannot be enabled for use. In the future when flavors/STF support is

6033N/A# available, this will still constrain the flavors which can be used

6033N/A# together.

6033N/A# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.ipsec.OpenSwanDriver

6033N/A# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.cisco_ipsec.CiscoCsrIPsecDriver

6033N/A# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.vyatta_ipsec.VyattaIPSecDriver

6033N/A# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.StrongSwanDriver

6033N/A# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.fedora_strongswan_ipsec.FedoraStrongSwanDriver

6033N/A# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.libreswan_ipsec.LibreSwanDriver

6033N/A# vpn_device_driver=another_driver

6033N/Avpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.solaris_ipsec.SolarisIPsecDriver

6033N/A

6033N/A[ipsec]

6033N/A# Status check interval

6033N/A# ipsec_status_check_interval=60

6033N/A

6033N/A[strongswan]

6033N/A# For fedora use:

6033N/A# default_config_area=/usr/share/strongswan/templates/config/strongswan.d

6033N/A# Default is for ubuntu use, /etc/strongswan.d

6033N/A# default_config_area=/etc/strongswan.d

6033N/A

6033N/A[libreswan]

6033N/A# Initial interval in seconds for checking if pluto daemon is shutdown

6033N/A# shutdown_check_timeout=1

6033N/A#

6033N/A# The maximum number of retries for checking for pluto daemon shutdown

6033N/A# shutdown_check_retries=5

6033N/A#

6033N/A# A factor to increase the retry interval for each retry

6033N/A# shutdown_check_back_off=1.5

6033N/A

6033N/A[solaris]

6033N/A# The Solaris driver only reads values from this section. Setting a value

6033N/A# here will override the defaults which are set in the driver files as

6033N/A# solaris_opts. Setting values here is optional.

6033N/A#

6033N/A# Setting ipsec_status_check_interval will change the interval that the

6033N/A# driver runs the status update code. The value is in seconds.

6033N/A# A lower value will result in more frequent updates to neutron.

6033N/A#

6033N/A# ipsec_status_check_interval = 10

6033N/A