Comment 2 for bug 1521955

By default access to keystone is blocked from all networks but admin:
https://github.com/openstack/fuel-library/blob/master/deployment/puppet/nailgun/manifests/iptables.pp#L200

What is your setup? How many networks? Can you provide iptables rules here?