Ask Your Question
0

How to install FWaaS in Openstack kilo.

asked 2016-05-04 05:55:39 -0500

craja gravatar image

updated 2016-05-06 06:15:10 -0500

Hello All,

I am a new user and I couldn't find any relevant answers for my question.

I have installed Openstack kilo with 3 node architecture in Ubuntu 14.04 using the below link:

http://docs.openstack.org/kilo/install-guide/install/apt/content/ (http://docs.openstack.org/kilo/instal...)

I am able to stage it successfully. Now, I want to install Fwaas in this architecture(Looks like there is a panel named Firewall appears in Horizon > network link after installing this?)

I couldn't find any doc related to this. Could someone please provide any pointer for this?

Thanks in Advance!!!

edit retag flag offensive close merge delete
add a comment

1 answer

Sort by » oldest newest most voted
1

answered 2016-05-26 05:44:19 -0500

craja gravatar image

updated 2016-05-26 05:45:24 -0500

Finally, I enabled the Firewall as a Service in Openstack kilo by the below procedure. Just adding this so that it may help someone.

  1. Added "service_plugins = router,neutron_fwaas.services.firewall.fwaas_plugin.FirewallPlugin" in neutron.conf on both controller and network node.

  2. Added the below line in fwaas_driver.ini on network node.

    [DEFAULT] [fwaas] driver = neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver enabled = True

  3. Restarted all neutron services in Network node and neutron server in controller node.
  4. Set "True" against firewall in local_settings.py on controller node and restarted apache.

That's it! Got the firewall panel on the Horizon GUI. Also able to apply FW policies to the VMs from the router level.

Thanks, craja

edit flag offensive delete link more

Comments

Hi what kind of package have you installed？ such as openstack-neutron-fwaas or python-neutron-fwaas?

yan gravatar imageyan ( 2017-03-23 16:23:25 -0500 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2016-05-04 05:55:39 -0500

Seen: 356 times

Last updated: May 26 '16

Related questions

Cannot delete instances using "nova delete <instance id>"

Kilo Heat Authorization Failed

resize image issue

openstack kilo vmware vm console error:console is currently unavailable. Please try again later [closed]

sr-iov on openstack

Cause for strange network config?

The keypair injected using api doesn't match the keypair created?

Cannot SSH to Docker Instance on Kilo [closed]

Kilo, lbaas, permission denied

Not able to register compute node(liberty) on cotroller (kilo) [closed]