Ask Your Question
0

How to install FWaaS in Openstack kilo.

asked 2016-05-04 05:55:39 -0600

craja gravatar image

updated 2016-05-06 06:15:10 -0600

Hello All,

I am a new user and I couldn't find any relevant answers for my question.

I have installed Openstack kilo with 3 node architecture in Ubuntu 14.04 using the below link:

http://docs.openstack.org/kilo/install-guide/install/apt/content/ (http://docs.openstack.org/kilo/instal...)

I am able to stage it successfully. Now, I want to install Fwaas in this architecture(Looks like there is a panel named Firewall appears in Horizon > network link after installing this?)

I couldn't find any doc related to this. Could someone please provide any pointer for this?

Thanks in Advance!!!

edit retag flag offensive close merge delete
add a comment

1 answer

Sort by » oldest newest most voted
1

answered 2016-05-26 05:44:19 -0600

craja gravatar image

updated 2016-05-26 05:45:24 -0600

Finally, I enabled the Firewall as a Service in Openstack kilo by the below procedure. Just adding this so that it may help someone.

  1. Added "service_plugins = router,neutron_fwaas.services.firewall.fwaas_plugin.FirewallPlugin" in neutron.conf on both controller and network node.

  2. Added the below line in fwaas_driver.ini on network node.

    [DEFAULT] [fwaas] driver = neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver enabled = True

  3. Restarted all neutron services in Network node and neutron server in controller node.
  4. Set "True" against firewall in local_settings.py on controller node and restarted apache.

That's it! Got the firewall panel on the Horizon GUI. Also able to apply FW policies to the VMs from the router level.

Thanks, craja

edit flag offensive delete link more

Comments

Hi what kind of package have you installed？ such as openstack-neutron-fwaas or python-neutron-fwaas?

yan gravatar imageyan ( 2017-03-23 16:23:25 -0600 )edit
add a comment

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2016-05-04 05:55:39 -0600

Seen: 374 times

Last updated: May 26 '16

Related questions

nova-docker Python Driver Local Build

Kilo can not finish neutron configure

glance images folder permission denied

Sahara UI broken after Kilo upgrade

can fwaas work if installed with already created routers? [closed]

How to rightly configure OpenLDAP for Openstack Kilo

kilo neutron : neutron agent-list showing nothing

floating ip takes too much time to work

Public IPv6 for tenant VMs with Kilo

lbaas v2 upgrade