openstack-manuals/doc/config-reference/source/tables/neutron-vpnaas_ipsec.rst

1.8 KiB

Description of VPNaaS IPsec plug-in configuration options
Configuration option = Default value Description
[cisco_csr_ipsec]
status_check_interval = 60 (Integer) Status check interval for Cisco CSR IPSec connections
[ipsec]
config_base_dir = $state_path/ipsec (String) Location to store ipsec server config files
enable_detailed_logging = False (Boolean) Enable detail logging for ipsec pluto process. If the flag set to True, the detailed logging will be written into config_base_dir/<pid>/log. Note: This setting applies to OpenSwan and LibreSwan only. StrongSwan logs to syslog.
ipsec_status_check_interval = 60 (Integer) Interval for checking ipsec status
[pluto]
restart_check_config = False (Boolean) Enable this flag to avoid from unnecessary restart
shutdown_check_back_off = 1.5 (Floating point) A factor to increase the retry interval for each retry
shutdown_check_retries = 5 (Integer) The maximum number of retries for checking for pluto daemon shutdown
shutdown_check_timeout = 1 (Integer) Initial interval in seconds for checking if pluto daemon is shutdown