Neutron/VPNaaS/SSLVPN/HowToUse

Neutron SSL-VPN extension: How to use page

On going reviews

1. Server Side Plugin and Agent support: https://review.openstack.org/#/c/70274/
2. Client Support[WIP]: https://review.openstack.org/#/c/70254/

Setup

(1) install openvpn

   apt-get install openvpn

(2) run devstack with ongoing patches

Workflow

(0) Clone test certificates and scripts from https://github.com/nttmcl/neutron_ssl_vpn_script/tree/master/openvpn

(1) create vpn certificate

   neutron vpn-credential-create --name vpncredential1 --ca ca.crt --server_certificate east-server.crt --server_key east-server.key --dh dh1024.pem

(2) create vpn service

   neutron vpn-service-create router1 private-subnet --name vpnservice1

(3) create sslvpn connection

   neutron ssl-vpn-connection-create vpnservice1 vpncredential1

(4) Check connections

    neutron ssl-vpn-connection-list

(5) run test client in namespace

    cd openvpn
    sudo ./ovpn-testclient.sh