Installing VPNaaS

The neutron-vpn-agent service typically runs on the network node, which in this environment is controller01.

Issue the following command on the controller node to install the VPN agent and its dependencies, including the strongSwan VPN software package:

# apt-get install neutron-vpn-agent

During the installation, you may notice the following message:

The following packages will be REMOVED:
  neutron-l3-agent

Here, the neutron-vpn-agent service replaces neutron-l3-agent but inherits all of its functionality and configuration.

Note

The agents are mutually exclusive and should not be installed simultaneously. Failure to heed this warning will result in unexpected issues.

Configuring the Neutron VPN agent service

Neutron stores the VPN agent configuration in the /etc/neutron/vpn_agent.ini file. The most common configuration options will be covered in the upcoming sections.

Defining a device driver

To manage a VPN service or device, the Neutron VPN agent must be configured to use a device...