380519eb46
This changeset contains the following, (1) NFP controller image builder tool This supports both devstack and Redhat RPM installations. (2) NFP setup script to configure the NFP on RPM installed setup. Change-Id: I074d713ad94286240fdae1887b0d4acd28f66144 Implements: blueprint gbp-network-services-framework
94 lines
2.9 KiB
Plaintext
94 lines
2.9 KiB
Plaintext
{
|
|
"description": "Creates new vpn service - ike + ipsec + vpn service + site-site connection(s)",
|
|
"heat_template_version": "2013-05-23",
|
|
"parameters": {
|
|
"RouterId": {
|
|
"description": "Router ID",
|
|
"type": "string"
|
|
},
|
|
"ServiceDescription": {
|
|
"description": "fip;tunnel_local-cidr",
|
|
"type": "string"
|
|
},
|
|
"Subnet": {
|
|
"description": "Subnet id on which vpn service is launched",
|
|
"type": "string"
|
|
}
|
|
},
|
|
"resources": {
|
|
"IKEPolicy": {
|
|
"properties": {
|
|
"auth_algorithm": "sha1",
|
|
"encryption_algorithm": "3des",
|
|
"ike_version": "v1",
|
|
"lifetime": {
|
|
"units": "seconds",
|
|
"value": 3600
|
|
},
|
|
"name": "IKEPolicy",
|
|
"pfs": "group5",
|
|
"phase1_negotiation_mode": "main"
|
|
},
|
|
"type": "OS::Neutron::IKEPolicy"
|
|
},
|
|
"IPsecPolicy": {
|
|
"properties": {
|
|
"auth_algorithm": "sha1",
|
|
"encapsulation_mode": "tunnel",
|
|
"encryption_algorithm": "3des",
|
|
"lifetime": {
|
|
"units": "seconds",
|
|
"value": 3600
|
|
},
|
|
"name": "IPsecPolicy",
|
|
"pfs": "group5",
|
|
"transform_protocol": "esp"
|
|
},
|
|
"type": "OS::Neutron::IPsecPolicy"
|
|
},
|
|
"VPNService": {
|
|
"properties": {
|
|
"admin_state_up": "true",
|
|
"description": {
|
|
"get_param": "ServiceDescription"
|
|
},
|
|
"name": "VPNService",
|
|
"router_id": {
|
|
"get_param": "RouterId"
|
|
},
|
|
"subnet_id": {
|
|
"get_param": "Subnet"
|
|
}
|
|
},
|
|
"type": "OS::Neutron::VPNService"
|
|
},
|
|
"site_to_site_connection1": {
|
|
"properties": {
|
|
"admin_state_up": "true",
|
|
"dpd": {
|
|
"actions": "hold",
|
|
"interval": 30,
|
|
"timeout": 120
|
|
},
|
|
"ikepolicy_id": {
|
|
"get_resource": "IKEPolicy"
|
|
},
|
|
"initiator": "bi-directional",
|
|
"ipsecpolicy_id": {
|
|
"get_resource": "IPsecPolicy"
|
|
},
|
|
"mtu": 1500,
|
|
"name": "site_to_site_connection1",
|
|
"peer_address": "192.168.102.117",
|
|
"peer_cidrs": ["19.0.0.0/24"],
|
|
"peer_id": "19.0.0.3",
|
|
"psk": "secret",
|
|
"vpnservice_id": {
|
|
"get_resource": "VPNService"
|
|
}
|
|
},
|
|
"type": "OS::Neutron::IPsecSiteConnection"
|
|
}
|
|
}
|
|
}
|