[DEFAULT] # VPN-Agent configuration file # Note vpn-agent inherits l3-agent, so you can use configs on l3-agent also [vpnagent] # vpn device drivers which vpn agent will use # If we want to use multiple drivers, we need to define this option multiple times. # NOTE: StrongSwan and openSwan cannot be installed at the same time. Thus, both cannot # be enabled for use. In the future when flavors/STF support is available, # this will still constrain the flavors which can be used together. # vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.ipsec.OpenSwanDriver # vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.cisco_ipsec.CiscoCsrIPsecDriver # vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.vyatta_ipsec.VyattaIPSecDriver # vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.StrongSwanDriver # vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.fedora_strongswan_ipsec.FedoraStrongSwanDriver # vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.libreswan_ipsec.LibreSwanDriver # vpn_device_driver=another_driver [ipsec] # Status check interval # ipsec_status_check_interval=60 # Enable detail logging for ipsec pluto process. # If the flag set to True, the detailed logging will # be written into config_base_dir//logs." # NOTE: this applies to OpenSwan and Libraswan, and # that StrongSwan has logging that logs to syslog. # enable_detailed_logging=False [strongswan] # For fedora use: # default_config_area=/usr/share/strongswan/templates/config/strongswan.d # Default is for ubuntu use, /etc/strongswan.d # default_config_area=/etc/strongswan.d