ff49617ff7
--perpeerlogbase option has no effect without --perpeerlog. [1] Moreover there is no need to create 'logs' dir as there is a 'log' dir that can be reused. Also fixed indentation issue for enable_detailed_logging option declaration. [1] http://linux.die.net/man/8/ipsec_pluto DocImpact Related-Bug: #1308730 Change-Id: Ie5ef72c2abd83b9b1114d90a6c7294cc34174018
46 lines
1.9 KiB
INI
46 lines
1.9 KiB
INI
[DEFAULT]
|
|
# VPN-Agent configuration file
|
|
# Note vpn-agent inherits l3-agent, so you can use configs on l3-agent also
|
|
|
|
[vpnagent]
|
|
# vpn device drivers which vpn agent will use
|
|
# If we want to use multiple drivers, we need to define this option multiple times.
|
|
# NOTE: StrongSwan and openSwan cannot be installed at the same time. Thus, both cannot
|
|
# be enabled for use. In the future when flavors/STF support is available,
|
|
# this will still constrain the flavors which can be used together.
|
|
# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.ipsec.OpenSwanDriver
|
|
# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.cisco_ipsec.CiscoCsrIPsecDriver
|
|
# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.vyatta_ipsec.VyattaIPSecDriver
|
|
# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.StrongSwanDriver
|
|
# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.fedora_strongswan_ipsec.FedoraStrongSwanDriver
|
|
# vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.libreswan_ipsec.LibreSwanDriver
|
|
# vpn_device_driver=another_driver
|
|
|
|
[ipsec]
|
|
# Status check interval
|
|
# ipsec_status_check_interval=60
|
|
|
|
# Enable detail logging for ipsec pluto process.
|
|
# If the flag set to True, the detailed logging will
|
|
# be written into config_base_dir/<pid>/log."
|
|
# NOTE: this applies to OpenSwan and Libraswan, and
|
|
# that StrongSwan has logging that logs to syslog.
|
|
# enable_detailed_logging=False
|
|
|
|
[strongswan]
|
|
# For fedora use:
|
|
# default_config_area=/usr/share/strongswan/templates/config/strongswan.d
|
|
# Default is for ubuntu use, /etc/strongswan.d
|
|
# default_config_area=/etc/strongswan.d
|
|
|
|
[pluto]
|
|
# Initial interval in seconds for checking if pluto daemon is shutdown
|
|
# shutdown_check_timeout=1
|
|
#
|
|
# The maximum number of retries for checking for pluto daemon shutdown
|
|
# shutdown_check_retries=5
|
|
#
|
|
# A factor to increase the retry interval for each retry
|
|
# shutdown_check_back_off=1.5
|
|
|