The following diagram represents the tunnel between two Neutron routers that are constructed from the IPSec site connections created in the previous section:
Figure 12.15
Neutron automatically generates an ipsec.conf VPN configuration file according to the settings defined by the user. The configuration files can be found on the network node in the /var/lib/neutron/ipsec/<router_id>/etc/ directory that corresponds to the individual Neutron router. In this demonstration, the controller node is also the network node.
The following configuration files correspond to the EAST and WEST routers, respectively:
# Configuration for EastRouterVPNService
config setup
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
authby=psk
mobike=no
conn ada99bbe-4e96-4252-8d12-f9c981980942
keyexchange=ikev1
left=10.50.0.112
leftsubnet=172.25.30.0/24
leftid=10.50.0.112
leftfirewall=yes
right=10...