Thanks venkata anil. @Paul. I checked the status of strongswan status and rhel strongswan status(using my patch set). Seems they have almost the same output.
Ubuntu(not established status): Command: ['ip', 'netns', 'exec', u'qrouter-9194e4c5-4f45-445f-b32c-c1101f4c215b', 'neutron-vpn-netns-wrapper', u'--mount_paths=/etc:/opt/stack/data/neutron/ipsec/9194e4c5-4f45-445f-b32c-c1101f4c215b/etc,/var/run:/opt/stack/data/neutron/ipsec/9194e4c5-4f45-445f-b32c-c1101f4c215b/var/run', '--cmd=ipsec,status'] Exit code: 0 Stdin: Stdout: Command: ['mount', '--bind', '/opt/stack/data/neutron/ipsec/9194e4c5-4f45-445f-b32c-c1101f4c215b/etc', '/etc'] Exit code: 0 Stdout: Stderr: Command: ['mount', '--bind', '/opt/stack/data/neutron/ipsec/9194e4c5-4f45-445f-b32c-c1101f4c215b/var/run', '/var/run'] Exit code: 0 Stdout: Stderr: Command: ['ipsec', 'status'] Exit code: 0 Stdout: Routed Connections: ed765a9b-a008-4f3b-96ec-74eea7576ea1{1}: ROUTED, TUNNEL ed765a9b-a008-4f3b-96ec-74eea7576ea1{1}: 10.0.0.0/24 === 10.2.0.0/24 Security Associations (0 up, 0 connecting): none Stderr:
RHEL(not establish status output) [root@icm ~]# /usr/bin/python /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf ip netns exec qrouter-9f798b40-d2b8-4ed2-b060-707947941db4 neutron-vpn-netns-wrapper --mount_paths=/etc:/var/lib/neutron/ipsec/9f798b40-d2b8-4ed2-b060-707947941db4/etc,/var/run:/var/lib/neutron/ipsec/9f798b40-d2b8-4ed2-b060-707947941db4/var/run --cmd=strongswan,status Command: ['mount', '--bind', '/var/lib/neutron/ipsec/9f798b40-d2b8-4ed2-b060-707947941db4/etc', '/etc'] Exit code: 0 Stdout: Stderr: Command: ['mount', '--bind', '/var/lib/neutron/ipsec/9f798b40-d2b8-4ed2-b060-707947941db4/var/run', '/var/run'] Exit code: 0 Stdout: Stderr: Command: ['strongswan', 'status'] Exit code: 0 Stdout: Routed Connections: 33791325-3bb0-4848-94cb-947c1d002668{4}: ROUTED, TUNNEL 33791325-3bb0-4848-94cb-947c1d002668{4}: 10.6.100.0/24 === 192.168.100.0/24 Security Associations (0 up, 0 connecting): none Stderr:
RHEL(established): [root@icm ~]# /usr/bin/python /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf ip netns exec qrouter-9f798b40-d2b8-4ed2-b060-707947941db4 neutron-vpn-netns-wrapper --mount_paths=/etc:/var/lib/neutron/ipsec/9f798b40-d2b8-4ed2-b060-707947941db4/etc,/var/run:/var/lib/neutron/ipsec/9f798b40-d2b8-4ed2-b060-707947941db4/var/run --cmd=strongswan,status Command: ['mount', '--bind', '/var/lib/neutron/ipsec/9f798b40-d2b8-4ed2-b060-707947941db4/etc', '/etc'] Exit code: 0 Stdout: Stderr: Command: ['mount', '--bind', '/var/lib/neutron/ipsec/9f798b40-d2b8-4ed2-b060-707947941db4/var/run', '/var/run'] Exit code: 0 Stdout: Stderr: Command: ['strongswan', 'status'] Exit code: 0 Stdout: Routed Connections: d1a377d6-d796-4727-8825-4f5b89b5e483{2}: ROUTED, TUNNEL d1a377d6-d796-4727-8825-4f5b89b5e483{2}: 10.6.100.0/24 === 192.168.100.0/24 Security Associations (1 up, 0 connecting): d1a377d6-d796-4727-8825-4f5b89b5e483[1]: ESTABLISHED 34 seconds ago, 10.105.0.236[10.105.0.236]...10.105.0.163[10.105.0.163] d1a377d6-d796-4727-8825-4f5b89b5e483{2}: INSTALLED, TUNNEL, ESP SPIs: cc17e56a_i c08d390c_o d1a377d6-d796-4727-8825-4f5b89b5e483{2}: 10.6.100.0/24 === 192.168.100.0/24 Stderr:
Thanks venkata anil.
@Paul. I checked the status of strongswan status and rhel strongswan status(using my patch set). Seems they have almost the same output.
Ubuntu(not established status): 9194e4c5- 4f45-445f- b32c-c1101f4c21 5b', 'neutron- vpn-netns- wrapper' , u'--mount_ paths=/ etc:/opt/ stack/data/ neutron/ ipsec/9194e4c5- 4f45-445f- b32c-c1101f4c21 5b/etc, /var/run: /opt/stack/ data/neutron/ ipsec/9194e4c5- 4f45-445f- b32c-c1101f4c21 5b/var/ run', '--cmd= ipsec,status' ] data/neutron/ ipsec/9194e4c5- 4f45-445f- b32c-c1101f4c21 5b/etc' , '/etc'] Exit code: 0 Stdout: Stderr: Command: ['mount', '--bind', '/opt/stack/ data/neutron/ ipsec/9194e4c5- 4f45-445f- b32c-c1101f4c21 5b/var/ run', '/var/run'] Exit code: 0 Stdout: Stderr: Command: ['ipsec', 'status'] Exit code: 0 Stdout: Routed Connections: a008-4f3b- 96ec-74eea7576e a1{1}: ROUTED, TUNNEL a008-4f3b- 96ec-74eea7576e a1{1}: 10.0.0.0/24 === 10.2.0.0/24
Command: ['ip', 'netns', 'exec', u'qrouter-
Exit code: 0
Stdin:
Stdout: Command: ['mount', '--bind', '/opt/stack/
ed765a9b-
ed765a9b-
Security Associations (0 up, 0 connecting):
none
Stderr:
RHEL(not establish status output) neutron- rootwrap /etc/neutron/ rootwrap. conf ip netns exec qrouter- 9f798b40- d2b8-4ed2- b060-707947941d b4 neutron- vpn-netns- wrapper --mount_ paths=/ etc:/var/ lib/neutron/ ipsec/9f798b40- d2b8-4ed2- b060-707947941d b4/etc, /var/run: /var/lib/ neutron/ ipsec/9f798b40- d2b8-4ed2- b060-707947941d b4/var/ run --cmd=strongswa n,status neutron/ ipsec/9f798b40- d2b8-4ed2- b060-707947941d b4/etc' , '/etc'] Exit code: 0 Stdout: Stderr: Command: ['mount', '--bind', '/var/lib/ neutron/ ipsec/9f798b40- d2b8-4ed2- b060-707947941d b4/var/ run', '/var/run'] Exit code: 0 Stdout: Stderr: Command: ['strongswan', 'status'] Exit code: 0 Stdout: Routed Connections: 3bb0-4848- 94cb-947c1d0026 68{4}: ROUTED, TUNNEL 3bb0-4848- 94cb-947c1d0026 68{4}: 10.6.100.0/24 === 192.168.100.0/24
[root@icm ~]# /usr/bin/python /usr/bin/
Command: ['mount', '--bind', '/var/lib/
33791325-
33791325-
Security Associations (0 up, 0 connecting):
none
Stderr:
RHEL(established): neutron- rootwrap /etc/neutron/ rootwrap. conf ip netns exec qrouter- 9f798b40- d2b8-4ed2- b060-707947941d b4 neutron- vpn-netns- wrapper --mount_ paths=/ etc:/var/ lib/neutron/ ipsec/9f798b40- d2b8-4ed2- b060-707947941d b4/etc, /var/run: /var/lib/ neutron/ ipsec/9f798b40- d2b8-4ed2- b060-707947941d b4/var/ run --cmd=strongswa n,status neutron/ ipsec/9f798b40- d2b8-4ed2- b060-707947941d b4/etc' , '/etc'] Exit code: 0 Stdout: Stderr: Command: ['mount', '--bind', '/var/lib/ neutron/ ipsec/9f798b40- d2b8-4ed2- b060-707947941d b4/var/ run', '/var/run'] Exit code: 0 Stdout: Stderr: Command: ['strongswan', 'status'] Exit code: 0 Stdout: Routed Connections: d796-4727- 8825-4f5b89b5e4 83{2}: ROUTED, TUNNEL d796-4727- 8825-4f5b89b5e4 83{2}: 10.6.100.0/24 === 192.168.100.0/24 d796-4727- 8825-4f5b89b5e4 83[1]: ESTABLISHED 34 seconds ago, 10.105. 0.236[10. 105.0.236] ...10.105. 0.163[10. 105.0.163] d796-4727- 8825-4f5b89b5e4 83{2}: INSTALLED, TUNNEL, ESP SPIs: cc17e56a_i c08d390c_o d796-4727- 8825-4f5b89b5e4 83{2}: 10.6.100.0/24 === 192.168.100.0/24
[root@icm ~]# /usr/bin/python /usr/bin/
Command: ['mount', '--bind', '/var/lib/
d1a377d6-
d1a377d6-
Security Associations (1 up, 0 connecting):
d1a377d6-
d1a377d6-
d1a377d6-
Stderr: