Your Keystone doesn’t listen on 35357. While I am not certain if that is the root of the problem, try setting auth_url = http://controller:5000 in neutron.conf.