[DEFAULT] [ipsec] # # From neutron.vpnaas.agent # # Location to store ipsec server config files (string value) #config_base_dir = $state_path/ipsec # Interval for checking ipsec status (integer value) #ipsec_status_check_interval = 60 # Enable detail logging for ipsec pluto process. If the flag set to True, the # detailed logging will be written into config_base_dir//log. Note: This # setting applies to OpenSwan and LibreSwan only. StrongSwan logs to syslog. # (boolean value) #enable_detailed_logging = false [pluto] # # From neutron.vpnaas.agent # # Initial interval in seconds for checking if pluto daemon is shutdown (integer # value) # Deprecated group/name - [libreswan]/shutdown_check_timeout #shutdown_check_timeout = 1 # The maximum number of retries for checking for pluto daemon shutdown (integer # value) # Deprecated group/name - [libreswan]/shutdown_check_retries #shutdown_check_retries = 5 # A factor to increase the retry interval for each retry (floating point value) # Deprecated group/name - [libreswan]/shutdown_check_back_off #shutdown_check_back_off = 1.5 # Enable this flag to avoid from unnecessary restart (boolean value) # Deprecated group/name - [libreswan]/restart_check_config #restart_check_config = false [strongswan] # # From neutron.vpnaas.agent # # Template file for ipsec configuration. (string value) #ipsec_config_template = /home/openstack/neutron-vpnaas/neutron_vpnaas/services/vpn/device_drivers/template/strongswan/ipsec.conf.template # Template file for strongswan configuration. (string value) #strongswan_config_template = /home/openstack/neutron-vpnaas/neutron_vpnaas/services/vpn/device_drivers/template/strongswan/strongswan.conf.template # Template file for ipsec secret configuration. (string value) #ipsec_secret_template = /home/openstack/neutron-vpnaas/neutron_vpnaas/services/vpn/device_drivers/template/strongswan/ipsec.secret.template # The area where default StrongSwan configuration files are located. (string # value) #default_config_area = /etc/strongswan.d [vpnagent] # # From neutron.vpnaas.agent # # The vpn device drivers Neutron will use (multi valued) #vpn_device_driver = neutron_vpnaas.services.vpn.device_drivers.ipsec.OpenSwanDriver, neutron_vpnaas.services.vpn.device_drivers.cisco_ipsec.CiscoCsrIPsecDriver, neutron_vpnaas.services.vpn.device_drivers.vyatta_ipsec.VyattaIPSecDriver, neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.StrongSwanDriver, neutron_vpnaas.services.vpn.device_drivers.fedora_strongswan_ipsec.FedoraStrongSwanDriver, neutron_vpnaas.services.vpn.device_drivers.libreswan_ipsec.LibreSwanDriver