Ask Your Question
0

How to install FWaaS in Openstack kilo.

asked 2016-05-04 05:55:39 -0500

craja gravatar image

updated 2016-05-06 06:15:10 -0500

Hello All,

I am a new user and I couldn't find any relevant answers for my question.

I have installed Openstack kilo with 3 node architecture in Ubuntu 14.04 using the below link:

http://docs.openstack.org/kilo/install-guide/install/apt/content/ (http://docs.openstack.org/kilo/instal...)

I am able to stage it successfully. Now, I want to install Fwaas in this architecture(Looks like there is a panel named Firewall appears in Horizon > network link after installing this?)

I couldn't find any doc related to this. Could someone please provide any pointer for this?

Thanks in Advance!!!

edit retag flag offensive close merge delete
add a comment

1 answer

Sort by » oldest newest most voted
1

answered 2016-05-26 05:44:19 -0500

craja gravatar image

updated 2016-05-26 05:45:24 -0500

Finally, I enabled the Firewall as a Service in Openstack kilo by the below procedure. Just adding this so that it may help someone.

  1. Added "service_plugins = router,neutron_fwaas.services.firewall.fwaas_plugin.FirewallPlugin" in neutron.conf on both controller and network node.

  2. Added the below line in fwaas_driver.ini on network node.

    [DEFAULT] [fwaas] driver = neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver enabled = True

  3. Restarted all neutron services in Network node and neutron server in controller node.
  4. Set "True" against firewall in local_settings.py on controller node and restarted apache.

That's it! Got the firewall panel on the Horizon GUI. Also able to apply FW policies to the VMs from the router level.

Thanks, craja

edit flag offensive delete link more

Comments

Hi what kind of package have you installed？ such as openstack-neutron-fwaas or python-neutron-fwaas?

yan gravatar imageyan ( 2017-03-23 16:23:25 -0500 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2016-05-04 05:55:39 -0500

Seen: 336 times

Last updated: May 26 '16

Related questions

Neutron FWaaS in PENDING_CREATE state

Lbaas in Kilo error

Kilo MySQL mysqld_openstack.cnf on Ubuntu

KILO CentOs - launch instance failure - expecting passwordCredentials

OpenStack Kilo + XenServer 6.5 SP1 ERROR: The instance sync for host did not match. Re-created its InstanceList.

DHCPOFFER getting dropped at tap device

Issues with SSL enabled keystone endpoint - KILO

Swift Kilo Install Error

changing ip-address of controller and compute nodes [closed]

RDO Kilo snapshot setup issues on CentOS 7.1