yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: neutron
       Status: Fix Committed => Fix Released

** Changed in: neutron
    Milestone: None => liberty-1

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1441788

Title:
  VPNaaS: Fedora support for StrongSwan

Status in OpenStack Neutron (virtual network service):
  Fix Released

Bug description:
  In early testing, I was unable to create a VPN connection using Fedora
  Release 12 and StrongSwan driver.

  Found out from StrongSwan IRC folks these issues:

  A) Unlike Ubuntu, both Strongswan and LibreSwan can be installed at once
  B) Fedora uses the process name "strongswan", whereas Ubuntu uses "ipsec".  The "ipsec" process is for LIbreSwan, under Fedora.
  C) The may be some sensitivity to tabs, in the config file, for Fedora (use only one?)

  
  The StrongSwan folks also mentioned about a issue, where one needs a kernel with support for XFRM and namespaces. They stated that there can be problems with passing traffic. They indicated it was a kernel issue and therefore applied to all Swan flavors.

  Research is needed to see if both Ubuntu and Fedora kernels have this
  support. Currently, we don't see an issue with Ubuntu, but should
  verify the kernel for all target operating systems.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1441788/+subscriptions