41 lines
1.8 KiB
ReStructuredText
41 lines
1.8 KiB
ReStructuredText
..
|
|
Warning: Do not edit this file. It is automatically generated from the
|
|
software project's code and your changes will be overwritten.
|
|
|
|
The tool to generate this file lives in openstack-doc-tools repository.
|
|
|
|
Please make any changes needed in the code, then run the
|
|
autogenerate-config-doc tool from the openstack-doc-tools repository, or
|
|
ask for help on the documentation mailing list, IRC channel or meeting.
|
|
|
|
.. _neutron-vpnaas_ipsec:
|
|
|
|
.. list-table:: Description of VPNaaS IPsec plug-in configuration options
|
|
:header-rows: 1
|
|
:class: config-ref-table
|
|
|
|
* - Configuration option = Default value
|
|
- Description
|
|
* - **[cisco_csr_ipsec]**
|
|
-
|
|
* - ``status_check_interval`` = ``60``
|
|
- (Integer) Status check interval for Cisco CSR IPSec connections
|
|
* - **[ipsec]**
|
|
-
|
|
* - ``config_base_dir`` = ``$state_path/ipsec``
|
|
- (String) Location to store ipsec server config files
|
|
* - ``enable_detailed_logging`` = ``False``
|
|
- (Boolean) Enable detail logging for ipsec pluto process. If the flag set to True, the detailed logging will be written into config_base_dir/<pid>/log. Note: This setting applies to OpenSwan and LibreSwan only. StrongSwan logs to syslog.
|
|
* - ``ipsec_status_check_interval`` = ``60``
|
|
- (Integer) Interval for checking ipsec status
|
|
* - **[pluto]**
|
|
-
|
|
* - ``restart_check_config`` = ``False``
|
|
- (Boolean) Enable this flag to avoid from unnecessary restart
|
|
* - ``shutdown_check_back_off`` = ``1.5``
|
|
- (Floating point) A factor to increase the retry interval for each retry
|
|
* - ``shutdown_check_retries`` = ``5``
|
|
- (Integer) The maximum number of retries for checking for pluto daemon shutdown
|
|
* - ``shutdown_check_timeout`` = ``1``
|
|
- (Integer) Initial interval in seconds for checking if pluto daemon is shutdown
|