From a0387fc78b916d230fedb368192920401c6f20e8 Mon Sep 17 00:00:00 2001 From: Jens Harbott Date: Thu, 29 Aug 2019 14:21:55 +0000 Subject: [PATCH] Update fwaas v2 scenario doc The devstack plugin also adds these statements to the ML2 config, so amend the documentation here accordingly. Change-Id: I5db327e91a3d4293b0a27fddc70dc6139fd42eb3 --- doc/source/admin/fwaas-v2-scenario.rst | 19 ++++++++++++++++--- 1 file changed, 16 insertions(+), 3 deletions(-) diff --git a/doc/source/admin/fwaas-v2-scenario.rst b/doc/source/admin/fwaas-v2-scenario.rst index 6c94c19e445..cd1fbf9239f 100644 --- a/doc/source/admin/fwaas-v2-scenario.rst +++ b/doc/source/admin/fwaas-v2-scenario.rst @@ -35,14 +35,27 @@ Enable FWaaS v2 [AGENT] extensions = fwaas_v2 +#. Configure the ML2 plugin agent extension. + + Add the following statements to ``ml2_conf.ini``, this file is usually + located at ``/etc/neutron/plugins/ml2/ml2_conf.ini``: + + .. code-block:: ini + + [agent] + extensions = fwaas_v2 + + [fwaas] + firewall_l2_driver = noop + #. Create the required tables in the database: .. code-block:: console # neutron-db-manage --subproject neutron-fwaas upgrade head -#. Restart the ``neutron-l3-agent`` and ``neutron-server`` services - to apply the settings. +#. Restart the ``neutron-l3-agent``, ``neutron-openvswitch-agent`` and + ``neutron-server`` services to apply the settings. .. note:: @@ -99,7 +112,7 @@ Then, create a firewall that applies the policy. of each policy. Consequently, a firewall policy with no rules blocks all traffic by default. -#. Create a firewall: +#. Create a firewall group: .. code-block:: console