)]}'
{"specs/juno/network/neutron-vpnaas-enablement.rst":[{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"1ba6abeb5e5050e13606fa4cfc2086a2a9d1889b","unresolved":false,"context_lines":[{"line_number":10,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"VPN service is a key feature provided by Neutron to enable Secured Private"},{"line_number":13,"context_line":"connection to OpenStack cloud. The reference VPN implement in Neutron at"},{"line_number":14,"context_line":"this time is IPSec VPN, and the IPSec driver is OpenSwan."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Currently, there is no Chef cookbook support to enable and start Neutron"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_0739793e","line":13,"updated":"2014-08-04 20:47:05.000000000","message":"\"VPN implementation\"","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":10,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"VPN service is a key feature provided by Neutron to enable Secured Private"},{"line_number":13,"context_line":"connection to OpenStack cloud. The reference VPN implement in Neutron at"},{"line_number":14,"context_line":"this time is IPSec VPN, and the IPSec driver is OpenSwan."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Currently, there is no Chef cookbook support to enable and start Neutron"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_90289686","line":13,"in_reply_to":"baada198_0739793e","updated":"2014-08-11 06:55:59.000000000","message":"Done","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"1ba6abeb5e5050e13606fa4cfc2086a2a9d1889b","unresolved":false,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"VPN service is a key feature provided by Neutron to enable Secured Private"},{"line_number":13,"context_line":"connection to OpenStack cloud. The reference VPN implement in Neutron at"},{"line_number":14,"context_line":"this time is IPSec VPN, and the IPSec driver is OpenSwan."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Currently, there is no Chef cookbook support to enable and start Neutron"},{"line_number":17,"context_line":"VPN service."}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_c70a2177","line":14,"updated":"2014-08-04 20:47:05.000000000","message":"Maybe add some links in here to   IPSec VPN and OpenSwan.","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":11,"context_line":""},{"line_number":12,"context_line":"VPN service is a key feature provided by Neutron to enable Secured Private"},{"line_number":13,"context_line":"connection to OpenStack cloud. The reference VPN implement in Neutron at"},{"line_number":14,"context_line":"this time is IPSec VPN, and the IPSec driver is OpenSwan."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Currently, there is no Chef cookbook support to enable and start Neutron"},{"line_number":17,"context_line":"VPN service."}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_70d0622b","line":14,"in_reply_to":"baada198_c70a2177","updated":"2014-08-11 06:55:59.000000000","message":"Done","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":12323,"name":"JJ Asghar","email":"jjasghar@gmail.com","username":"jj"},"change_message_id":"969ea94f980ab2b5dc7c42e08840faac31a9c704","unresolved":false,"context_lines":[{"line_number":13,"context_line":"connection to OpenStack cloud. The reference VPN implement in Neutron at"},{"line_number":14,"context_line":"this time is IPSec VPN, and the IPSec driver is OpenSwan."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Currently, there is no Chef cookbook support to enable and start Neutron"},{"line_number":17,"context_line":"VPN service."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_7c4b2ab2","line":16,"updated":"2014-08-07 19:07:42.000000000","message":"Is this portion going to enable this? Below says add a recipe, so this just doesnt turn something on, it adds functionality?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":13,"context_line":"connection to OpenStack cloud. The reference VPN implement in Neutron at"},{"line_number":14,"context_line":"this time is IPSec VPN, and the IPSec driver is OpenSwan."},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Currently, there is no Chef cookbook support to enable and start Neutron"},{"line_number":17,"context_line":"VPN service."},{"line_number":18,"context_line":""},{"line_number":19,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_b07bda29","line":16,"in_reply_to":"baada198_7c4b2ab2","updated":"2014-08-11 06:55:59.000000000","message":"The recipe is used to configure and start Neutron VPN service. New packages for VPN service maybe installed depends on the platform (for example: neutron-plugin-vpn-agent need to be installed on Ubuntu).","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":12323,"name":"JJ Asghar","email":"jjasghar@gmail.com","username":"jj"},"change_message_id":"969ea94f980ab2b5dc7c42e08840faac31a9c704","unresolved":false,"context_lines":[{"line_number":21,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Add a recipe, and related attribute/unit tests to cookbook-openstack-network"},{"line_number":24,"context_line":"to enable VPN service."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Alternatives"},{"line_number":27,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_1c806ebe","line":24,"updated":"2014-08-07 19:07:42.000000000","message":"Agreed, there\u0027s a lack of detail here. It\u0027s cool that you want to add a recipe, but what where is this going? What will you gain etc?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"1ba6abeb5e5050e13606fa4cfc2086a2a9d1889b","unresolved":false,"context_lines":[{"line_number":21,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Add a recipe, and related attribute/unit tests to cookbook-openstack-network"},{"line_number":24,"context_line":"to enable VPN service."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Alternatives"},{"line_number":27,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_e76ba51c","line":24,"updated":"2014-08-04 20:47:05.000000000","message":"What types of general options would be needed here?   a short summary of what you had in mind would be nice.\nI\u0027m thinking of all the possible ipsec and openswan configuration options and which ones of those will be available in the first pass of this support?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":21,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Add a recipe, and related attribute/unit tests to cookbook-openstack-network"},{"line_number":24,"context_line":"to enable VPN service."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"Alternatives"},{"line_number":27,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_b02e7af7","line":24,"in_reply_to":"baada198_1c806ebe","updated":"2014-08-11 06:55:59.000000000","message":"I listed the attributes in \"Other deployer Impact\" section below. I will move them here and add more details about the recipe.","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"1ba6abeb5e5050e13606fa4cfc2086a2a9d1889b","unresolved":false,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"Security impact"},{"line_number":42,"context_line":"---------------"},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"No Security impact"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"Notifications impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_a7552d53","line":43,"updated":"2014-08-04 20:47:05.000000000","message":"does the ipsec or openswan require certificates or credentials?  if yes, how would those be handled?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"Security impact"},{"line_number":42,"context_line":"---------------"},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"No Security impact"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"Notifications impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_b0983a1b","line":43,"in_reply_to":"baada198_a7552d53","updated":"2014-08-11 06:55:59.000000000","message":"Right now only PSK (pre-shared key) is supported and it\u0027s part of neutron VPN connection command process. \n\nFor example, \n\nneutron ipsec-site-connection-create --name vpnconnection1 --vpnservice-id myvpn --ikepolicy-id ikepolicy1 --ipsecpolicy-id ipsecpolicy1 --peer-address 172.24.4.233 --peer-id 172.24.4.233 --peer-cidr 10.2.0.0/24 --psk secret\n\nsecret here is the PSK used in the new IPsec connection. \n\nI believe this is out of scope of this BP.","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"61758ae7994d511b1c9ae24db58ed2ca27c1a050","unresolved":false,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"Security impact"},{"line_number":42,"context_line":"---------------"},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"No Security impact"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"Notifications impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_d25e4414","line":43,"in_reply_to":"baada198_b0983a1b","updated":"2014-08-12 20:27:35.000000000","message":"Please add this summary to the rst, it would help others with the same security question.","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"868a61095802154b423cde424880563ee14adcba","unresolved":false,"context_lines":[{"line_number":40,"context_line":""},{"line_number":41,"context_line":"Security impact"},{"line_number":42,"context_line":"---------------"},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"No Security impact"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"Notifications impact"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_993b059b","line":43,"in_reply_to":"baada198_d25e4414","updated":"2014-08-13 01:57:16.000000000","message":"will add in next patch.","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":5371,"name":"Mathew Odden","email":"locke105@gmail.com","username":"locke105"},"change_message_id":"d78b46deb06e7324cef95622b9277977eea19e97","unresolved":false,"context_lines":[{"line_number":60,"context_line":"---------------------"},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* Add a new attribute value to decide if VPN agent or L3 agent should"},{"line_number":63,"context_line":"  be started, since these two services cannot be started at the same time."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"* Add new attributes for VPN configurations in /etc/neutron/vpn_agent.ini"},{"line_number":66,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_6d08d62e","line":63,"updated":"2014-08-07 20:51:43.000000000","message":"I\u0027m pretty sure they are the same service depending upon the platform (ubuntu/RHEL)\n\nThe VPN driver is a subclass of L3","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":60,"context_line":"---------------------"},{"line_number":61,"context_line":""},{"line_number":62,"context_line":"* Add a new attribute value to decide if VPN agent or L3 agent should"},{"line_number":63,"context_line":"  be started, since these two services cannot be started at the same time."},{"line_number":64,"context_line":""},{"line_number":65,"context_line":"* Add new attributes for VPN configurations in /etc/neutron/vpn_agent.ini"},{"line_number":66,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_50a0be35","line":63,"in_reply_to":"baada198_6d08d62e","updated":"2014-08-11 06:55:59.000000000","message":"True, but we still need to decide which configuration file should be used when VPN service is enable or not. \n\nFor example, when VPN is enable, /etc/neutron/vpn_agent.ini should also be used besides /etc/neutron/l3_agent.ini. However, /etc/neutron/vpn_agent.ini should not be used when only L3 is enabled. \n\nActually, only one of the two services L3 agent and VPN agent should be started. \n\nAgree?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"1ba6abeb5e5050e13606fa4cfc2086a2a9d1889b","unresolved":false,"context_lines":[{"line_number":88,"context_line":"* Add new attributes for VPN configurations in /etc/neutron/vpn_agent.ini and"},{"line_number":89,"context_line":"  a new vpn template."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"* Add a new recipe to install the VPN packages, configure the [VPN_TEMPLATE]_"},{"line_number":92,"context_line":"  and start VPN service"},{"line_number":93,"context_line":""},{"line_number":94,"context_line":"* Enable VPN support in Horizon [VPM_HORIZON]_"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_8733c911","line":91,"updated":"2014-08-04 20:47:05.000000000","message":"Are the VPN packages available across all 3 currently supported cookbook platforms?  suse, ubuntu, redhat?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":88,"context_line":"* Add new attributes for VPN configurations in /etc/neutron/vpn_agent.ini and"},{"line_number":89,"context_line":"  a new vpn template."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"* Add a new recipe to install the VPN packages, configure the [VPN_TEMPLATE]_"},{"line_number":92,"context_line":"  and start VPN service"},{"line_number":93,"context_line":""},{"line_number":94,"context_line":"* Enable VPN support in Horizon [VPM_HORIZON]_"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_ab51afd6","line":91,"in_reply_to":"baada198_8733c911","updated":"2014-08-11 06:55:59.000000000","message":"Ubuntu: neutron-plugin-vpn-agent package is available. \n\nRH: openstack-neutron includes vpn agent. \n\nSuse:  openstack-neutron-vpn-agent","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"1ba6abeb5e5050e13606fa4cfc2086a2a9d1889b","unresolved":false,"context_lines":[{"line_number":102,"context_line":""},{"line_number":103,"context_line":"* Add unit tests"},{"line_number":104,"context_line":""},{"line_number":105,"context_line":"* ref to ask openstack on this topic [HOW_TO_SETUP_VPN]_"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"Dependencies"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_62fea306","line":105,"updated":"2014-08-04 20:47:05.000000000","message":"maybe give link here to make this easier?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"61758ae7994d511b1c9ae24db58ed2ca27c1a050","unresolved":false,"context_lines":[{"line_number":102,"context_line":""},{"line_number":103,"context_line":"* Add unit tests"},{"line_number":104,"context_line":""},{"line_number":105,"context_line":"* ref to ask openstack on this topic [HOW_TO_SETUP_VPN]_"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"Dependencies"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_327ce074","line":105,"in_reply_to":"baada198_0bf37be7","updated":"2014-08-12 20:27:35.000000000","message":"yup, the link works. thx.","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":102,"context_line":""},{"line_number":103,"context_line":"* Add unit tests"},{"line_number":104,"context_line":""},{"line_number":105,"context_line":"* ref to ask openstack on this topic [HOW_TO_SETUP_VPN]_"},{"line_number":106,"context_line":""},{"line_number":107,"context_line":""},{"line_number":108,"context_line":"Dependencies"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_0bf37be7","line":105,"in_reply_to":"baada198_62fea306","updated":"2014-08-11 06:55:59.000000000","message":"Mark, what do you mean?  On the rendered page by this RST, you can click [HOW_TO_SETUP_VPN]_ to directly go to the link at the bottom of this page. this is not what you are looking for?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"1ba6abeb5e5050e13606fa4cfc2086a2a9d1889b","unresolved":false,"context_lines":[{"line_number":111,"context_line":"Testing"},{"line_number":112,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"* Add unit tests for the new recipe."},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"Documentation Impact"},{"line_number":117,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_a7e36d9e","line":114,"updated":"2014-08-04 20:47:05.000000000","message":"How could the CI intergration testing be changed someday to allow this new support to be tested.   I know right now we only use nova network in the test, but we should at least briefly cover what would be needed to run a basic integration test.   Number and types of Nodes required (1?),  number of NIC\u0027s required?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":111,"context_line":"Testing"},{"line_number":112,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":113,"context_line":""},{"line_number":114,"context_line":"* Add unit tests for the new recipe."},{"line_number":115,"context_line":""},{"line_number":116,"context_line":"Documentation Impact"},{"line_number":117,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_cb97c337","line":114,"in_reply_to":"baada198_a7e36d9e","updated":"2014-08-11 06:55:59.000000000","message":"Done","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7128,"name":"Mark Vanderwiel","email":"vanderwl@us.ibm.com","username":"kramvan"},"change_message_id":"1ba6abeb5e5050e13606fa4cfc2086a2a9d1889b","unresolved":false,"context_lines":[{"line_number":115,"context_line":""},{"line_number":116,"context_line":"Documentation Impact"},{"line_number":117,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":118,"context_line":""},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"References"},{"line_number":121,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_6794f5e7","line":118,"updated":"2014-08-04 20:47:05.000000000","message":"I would hope that we would add some general setup information to the network README to help use this new support.  Maybe give a short summary of the steps to consider when using this?","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"5c28e5f88e8ab42d43fb726795c56ca0ae2b83fd","unresolved":false,"context_lines":[{"line_number":115,"context_line":""},{"line_number":116,"context_line":"Documentation Impact"},{"line_number":117,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":118,"context_line":""},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"References"},{"line_number":121,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_4b3f3322","line":118,"in_reply_to":"baada198_084d8871","updated":"2014-08-11 06:55:59.000000000","message":"Done","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":5371,"name":"Mathew Odden","email":"locke105@gmail.com","username":"locke105"},"change_message_id":"d78b46deb06e7324cef95622b9277977eea19e97","unresolved":false,"context_lines":[{"line_number":115,"context_line":""},{"line_number":116,"context_line":"Documentation Impact"},{"line_number":117,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":118,"context_line":""},{"line_number":119,"context_line":""},{"line_number":120,"context_line":"References"},{"line_number":121,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":2,"id":"baada198_084d8871","line":118,"in_reply_to":"baada198_6794f5e7","updated":"2014-08-07 20:51:43.000000000","message":"I\u0027d like to see a set of attributes/steps to enable support for VPNaaS vs default L3","commit_id":"cc3d8e34b84bfa4593eb143925a03a9fbf825927"},{"author":{"_account_id":8112,"name":"Ma Wen Cheng","email":"wenchma@cn.ibm.com","username":"wenchma"},"change_message_id":"400c73f159d1ea09105e707881787da139d4e70e","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"The attributes need to be added includes:"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"* A new attribute openstack[\u0027openstack\u0027][\u0027network\u0027][\u0027enable_vpn\u0027] to decide"},{"line_number":37,"context_line":"  if VPN agent or L3 agent should be started"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"* New attributes for VPN configurations in /etc/neutron/vpn_agent.ini:"}],"source_content_type":"text/x-rst","patch_set":8,"id":"baada198_00769140","line":36,"updated":"2014-08-13 07:10:20.000000000","message":"should change openstack[\u0027openstack\u0027][\u0027network\u0027][\u0027enable_vpn\u0027]   to `openstack[\u0027network\u0027][\u0027enable_vpn\u0027]` \n\nThe followings are the same.","commit_id":"66f119fd2623fb925c181b665540d29a2722ca4e"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"7543be7e3679af00edcec75430e488da41bd185b","unresolved":false,"context_lines":[{"line_number":33,"context_line":""},{"line_number":34,"context_line":"The attributes need to be added includes:"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"* A new attribute openstack[\u0027openstack\u0027][\u0027network\u0027][\u0027enable_vpn\u0027] to decide"},{"line_number":37,"context_line":"  if VPN agent or L3 agent should be started"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"* New attributes for VPN configurations in /etc/neutron/vpn_agent.ini:"}],"source_content_type":"text/x-rst","patch_set":8,"id":"7ac7a964_a02b332f","line":36,"in_reply_to":"baada198_00769140","updated":"2014-08-14 02:09:52.000000000","message":"I don\u0027t understand why [\u0027openstack\u0027] need to be removed here. Can you explain?","commit_id":"66f119fd2623fb925c181b665540d29a2722ca4e"},{"author":{"_account_id":8112,"name":"Ma Wen Cheng","email":"wenchma@cn.ibm.com","username":"wenchma"},"change_message_id":"400c73f159d1ea09105e707881787da139d4e70e","unresolved":false,"context_lines":[{"line_number":64,"context_line":""},{"line_number":65,"context_line":"Right now only IKE with \"PSK\" (Pre-Shared Key) authentication mode is implemented"},{"line_number":66,"context_line":"in Neutron VPNaaS for simplicity. And the psk is a input of IPsec site connection"},{"line_number":67,"context_line":"establishment process. "},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"For example, \"secret\" psk can be used in a new IPsec site connection:"},{"line_number":70,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"baada198_051f8372","line":67,"updated":"2014-08-13 07:10:20.000000000","message":"remove the extra blank space, line 74 is the same","commit_id":"66f119fd2623fb925c181b665540d29a2722ca4e"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"7543be7e3679af00edcec75430e488da41bd185b","unresolved":false,"context_lines":[{"line_number":64,"context_line":""},{"line_number":65,"context_line":"Right now only IKE with \"PSK\" (Pre-Shared Key) authentication mode is implemented"},{"line_number":66,"context_line":"in Neutron VPNaaS for simplicity. And the psk is a input of IPsec site connection"},{"line_number":67,"context_line":"establishment process. "},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"For example, \"secret\" psk can be used in a new IPsec site connection:"},{"line_number":70,"context_line":""}],"source_content_type":"text/x-rst","patch_set":8,"id":"7ac7a964_c06caf39","line":67,"in_reply_to":"baada198_051f8372","updated":"2014-08-14 02:09:52.000000000","message":"Done","commit_id":"66f119fd2623fb925c181b665540d29a2722ca4e"},{"author":{"_account_id":9970,"name":"John Kasperski","email":"jckasper@linux.vnet.ibm.com","username":"jckasper"},"change_message_id":"abe0dc00964efc4947a22833069b7a6f0ba2bd7b","unresolved":false,"context_lines":[{"line_number":119,"context_line":"* Add a new recipe to install the VPN packages, configure the [VPN_TEMPLATE]_"},{"line_number":120,"context_line":"  and start VPN service"},{"line_number":121,"context_line":""},{"line_number":122,"context_line":"* Enable VPN support in Horizon [VPM_HORIZON]_"},{"line_number":123,"context_line":"  Configure /opt/stack/horizon/openstack_dashboard/local/local_settings.py::"},{"line_number":124,"context_line":""},{"line_number":125,"context_line":"       OPENSTACK_NEUTRON_NETWORK \u003d {"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9ab29df4_2012d0b4","line":122,"updated":"2014-08-13 20:50:06.000000000","message":"VPM  \u003d\u003e  VPN","commit_id":"66f119fd2623fb925c181b665540d29a2722ca4e"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"7543be7e3679af00edcec75430e488da41bd185b","unresolved":false,"context_lines":[{"line_number":119,"context_line":"* Add a new recipe to install the VPN packages, configure the [VPN_TEMPLATE]_"},{"line_number":120,"context_line":"  and start VPN service"},{"line_number":121,"context_line":""},{"line_number":122,"context_line":"* Enable VPN support in Horizon [VPM_HORIZON]_"},{"line_number":123,"context_line":"  Configure /opt/stack/horizon/openstack_dashboard/local/local_settings.py::"},{"line_number":124,"context_line":""},{"line_number":125,"context_line":"       OPENSTACK_NEUTRON_NETWORK \u003d {"}],"source_content_type":"text/x-rst","patch_set":8,"id":"7ac7a964_808397cb","line":122,"in_reply_to":"9ab29df4_2012d0b4","updated":"2014-08-14 02:09:52.000000000","message":"Done","commit_id":"66f119fd2623fb925c181b665540d29a2722ca4e"},{"author":{"_account_id":9970,"name":"John Kasperski","email":"jckasper@linux.vnet.ibm.com","username":"jckasper"},"change_message_id":"abe0dc00964efc4947a22833069b7a6f0ba2bd7b","unresolved":false,"context_lines":[{"line_number":167,"context_line":".. [VPN_TEMPLATE] `VPN template values"},{"line_number":168,"context_line":"   \u003chttp://docs.openstack.org/trunk/config-reference/content/networking-options-vpn.html\u003e`_"},{"line_number":169,"context_line":""},{"line_number":170,"context_line":".. [VPM_HORIZON] `VPN support in Horizon \u003chttps://review.openstack.org/#/c/108493/1\u003e`_"},{"line_number":171,"context_line":""},{"line_number":172,"context_line":".. [HOW_TO_SETUP_VPN] `How to setup VPNaaS"},{"line_number":173,"context_line":"   \u003chttps://ask.openstack.org/en/question/6243/how-to-set-up-neutron-vpn-service-vpnaas/\u003e`_"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9ab29df4_a025000c","line":170,"updated":"2014-08-13 20:50:06.000000000","message":"VPM  \u003d\u003e VPN","commit_id":"66f119fd2623fb925c181b665540d29a2722ca4e"},{"author":{"_account_id":7183,"name":"Xu Han Peng","email":"xuhanp@linux.vnet.ibm.com","username":"xuhanp"},"change_message_id":"7543be7e3679af00edcec75430e488da41bd185b","unresolved":false,"context_lines":[{"line_number":167,"context_line":".. [VPN_TEMPLATE] `VPN template values"},{"line_number":168,"context_line":"   \u003chttp://docs.openstack.org/trunk/config-reference/content/networking-options-vpn.html\u003e`_"},{"line_number":169,"context_line":""},{"line_number":170,"context_line":".. [VPM_HORIZON] `VPN support in Horizon \u003chttps://review.openstack.org/#/c/108493/1\u003e`_"},{"line_number":171,"context_line":""},{"line_number":172,"context_line":".. [HOW_TO_SETUP_VPN] `How to setup VPNaaS"},{"line_number":173,"context_line":"   \u003chttps://ask.openstack.org/en/question/6243/how-to-set-up-neutron-vpn-service-vpnaas/\u003e`_"}],"source_content_type":"text/x-rst","patch_set":8,"id":"7ac7a964_a08893e8","line":170,"in_reply_to":"9ab29df4_a025000c","updated":"2014-08-14 02:09:52.000000000","message":"Done","commit_id":"66f119fd2623fb925c181b665540d29a2722ca4e"}]}