A tale of two routers

The following diagram represents the tunnel between two Neutron routers that are constructed from the IPSec site connections created in the previous section:

A tale of two routers

Figure 12.15

Neutron automatically generates an ipsec.conf VPN configuration file according to the settings defined by the user. The configuration files can be found on the network node in the /var/lib/neutron/ipsec/<router_id>/etc/ directory that corresponds to the individual Neutron router. In this demonstration, the controller node is also the network node.

The following configuration files correspond to the EAST and WEST routers, respectively:

# Configuration for EastRouterVPNService ...

Get Learning OpenStack Networking (Neutron) - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.