Ask Your Question
0

error for VPNaaS at Juno

asked 2015-03-26 03:01:30 -0500

adhi gravatar image

Try to add VPNaaS at my openstack Juno playground, but find error while restarting the "neutron-vpn-agent". Here's the error appears on vpn_agent.log

2015-03-26 14:55:36.059 55595 INFO neutron.openstack.common.service [req-c453fb3f-4949-4d72-b127-0b76e0b942f6 None] Caught SIGTERM, exiting
2015-03-26 14:55:36.462 56271 INFO neutron.common.config [-] Logging enabled!
2015-03-26 14:55:36.466 56271 INFO oslo.messaging._drivers.impl_rabbit [req-ec535818-aece-44d8-a4d5-fdac8a4bfe41 ] Connecting to AMQP server on juno1:5672
2015-03-26 14:55:36.474 56271 INFO oslo.messaging._drivers.impl_rabbit [req-ec535818-aece-44d8-a4d5-fdac8a4bfe41 ] Connected to AMQP server on juno1:5672
2015-03-26 14:55:36.477 56271 INFO oslo.messaging._drivers.impl_rabbit [req-ec535818-aece-44d8-a4d5-fdac8a4bfe41 ] Connecting to AMQP server on juno1:5672
2015-03-26 14:55:36.483 56271 INFO oslo.messaging._drivers.impl_rabbit [req-ec535818-aece-44d8-a4d5-fdac8a4bfe41 ] Connected to AMQP server on juno1:5672
2015-03-26 14:55:36.500 56271 INFO oslo.messaging._drivers.impl_rabbit [req-ac2084e0-8819-4833-b083-8094639075d1 ] Connecting to AMQP server on juno1:5672
2015-03-26 14:55:36.509 56271 INFO oslo.messaging._drivers.impl_rabbit [req-ac2084e0-8819-4833-b083-8094639075d1 ] Connected to AMQP server on juno1:5672
2015-03-26 14:55:36.524 56271 INFO oslo.messaging._drivers.impl_rabbit [-] Connecting to AMQP server on juno1:5672
2015-03-26 14:55:36.531 56271 INFO oslo.messaging._drivers.impl_rabbit [-] Connected to AMQP server on juno1:5672
2015-03-26 14:55:36.535 56271 INFO neutron.agent.l3_agent [-] L3 agent started
2015-03-26 14:55:38.141 56271 ERROR neutron.agent.linux.utils [-] 
Command: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'ip', 'netns', 'exec', 'qrouter-7bc9d46c-2ed4-4801-8e25-49a46d31db47', 'ipsec', 'whack', '--ctlbase', '/var/lib/neutron/ipsec/7bc9d46c-2ed4-4801-8e25-49a46d31db47/var/run/pluto', '--status']
Exit code: 1
Stdout: ''
Stderr: 'whack: Pluto is not running (no "/var/lib/neutron/ipsec/7bc9d46c-2ed4-4801-8e25-49a46d31db47/var/run/pluto.ctl")\n'

And here is the syslog while I restart the "openswan" and "neutron-vpn-agent" service

Mar 26 14:55:13 juno2 ipsec_setup: Stopping Openswan IPsec...
Mar 26 14:55:15 juno2 kernel: [101294.626363] NET: Unregistered protocol family 15
Mar 26 14:55:15 juno2 ipsec_setup: ...Openswan IPsec stopped
Mar 26 14:55:15 juno2 ipsec_setup: Starting Openswan IPsec 2.6.38...
Mar 26 14:55:15 juno2 ipsec_setup: Using KLIPS/legacy stack
Mar 26 14:55:16 juno2 kernel: [101294.761598] AVX2 instructions are not detected.
Mar 26 14:55:16 juno2 kernel: [101294.788682] AVX2 or AES-NI instructions are not detected.
Mar 26 14:55:16 juno2 ipsec_setup: No KLIPS support found while requested, desperately falling back to netkey
Mar 26 14:55:16 juno2 ipsec_setup: NETKEY support found. Use protostack=netkey in /etc/ipsec.conf to avoid attempts to use KLIPS. Attempting to continue with NETKEY
Mar 26 14:55:16 juno2 ipsec_setup: Using NETKEY(XFRM) stack
Mar 26 14:55:16 juno2 kernel: [101294.817946] NET: Registered protocol family 15
Mar 26 14:55:16 juno2 kernel: [101294.931757] Initializing XFRM netlink socket
Mar 26 14:55:16 juno2 kernel: [101295.010451] AVX2 instructions are not detected.
Mar 26 14:55:16 juno2 kernel: [101295.044249] AVX2 or AES-NI instructions are not detected.
Mar 26 14:55:16 juno2 ipsec_setup: ...Openswan IPsec started
Mar 26 14 ...
(more)
edit retag flag offensive close merge delete

Comments

Have you found any solution?

Antonio G. gravatar imageAntonio G. ( 2015-06-01 01:54:42 -0500 )edit

Still nope :(

adhi gravatar imageadhi ( 2015-06-01 17:56:32 -0500 )edit

did you find a solution? I ran into the same problem

zkassab gravatar imagezkassab ( 2015-08-05 10:38:09 -0500 )edit

2 answers

Sort by ยป oldest newest most voted
0

answered 2015-11-16 03:05:52 -0500

adhi gravatar image

solve by my self https://ask.openstack.org/en/question/84594/vpnaas-liberty-error-while-create-ipsec-site-connections/ (https://ask.openstack.org/en/question...) .

at liberty release VPN service will be down/up status after we creating IPsec Site Connection

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-03-26 03:01:30 -0500

Seen: 423 times

Last updated: Nov 16 '15