neutron-vpnaas policies¶
The following is an overview of all available policies in neutron-vpnaas. For a sample configuration file, refer to Sample Neutron VPNaaS Policy File.
neutron-vpnaas¶
- create_endpoint_group
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- POST - /vpn/endpoint-groups
 
- Scope Types:
- project 
 
 - Create a VPN endpoint group 
- update_endpoint_group
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- PUT - /vpn/endpoint-groups/{id}
 
- Scope Types:
- project 
 
 - Update a VPN endpoint group 
- delete_endpoint_group
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- DELETE - /vpn/endpoint-groups/{id}
 
- Scope Types:
- project 
 
 - Delete a VPN endpoint group 
- get_endpoint_group
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- GET - /vpn/endpoint-groups
- GET - /vpn/endpoint-groups/{id}
 
- Scope Types:
- project 
 
 - Get VPN endpoint groups 
- create_ikepolicy
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- POST - /vpn/ikepolicies
 
- Scope Types:
- project 
 
 - Create an IKE policy 
- update_ikepolicy
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- PUT - /vpn/ikepolicies/{id}
 
- Scope Types:
- project 
 
 - Update an IKE policy 
- delete_ikepolicy
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- DELETE - /vpn/ikepolicies/{id}
 
- Scope Types:
- project 
 
 - Delete an IKE policy 
- get_ikepolicy
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- GET - /vpn/ikepolicies
- GET - /vpn/ikepolicies/{id}
 
- Scope Types:
- project 
 
 - Get IKE policyies 
- create_ipsecpolicy
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- POST - /vpn/ipsecpolicies
 
- Scope Types:
- project 
 
 - Create an IPsec policy 
- update_ipsecpolicy
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- PUT - /vpn/ipsecpolicies/{id}
 
- Scope Types:
- project 
 
 - Update an IPsec policy 
- delete_ipsecpolicy
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- DELETE - /vpn/ipsecpolicies/{id}
 
- Scope Types:
- project 
 
 - Delete an IPsec policy 
- get_ipsecpolicy
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- GET - /vpn/ipsecpolicies
- GET - /vpn/ipsecpolicies/{id}
 
- Scope Types:
- project 
 
 - Get IPsec policies 
- create_ipsec_site_connection
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- POST - /vpn/ipsec-site-connections
 
- Scope Types:
- project 
 
 - Create an IPsec site connection 
- update_ipsec_site_connection
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- PUT - /vpn/ipsec-site-connections/{id}
 
- Scope Types:
- project 
 
 - Update an IPsec site connection 
- delete_ipsec_site_connection
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- DELETE - /vpn/ipsec-site-connections/{id}
 
- Scope Types:
- project 
 
 - Delete an IPsec site connection 
- get_ipsec_site_connection
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- GET - /vpn/ipsec-site-connections
- GET - /vpn/ipsec-site-connections/{id}
 
- Scope Types:
- project 
 
 - Get IPsec site connections 
- create_vpnservice
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- POST - /vpn/vpnservices
 
- Scope Types:
- project 
 
 - Create a VPN service 
- update_vpnservice
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- PUT - /vpn/vpnservices/{id}
 
- Scope Types:
- project 
 
 - Update a VPN service 
- delete_vpnservice
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- DELETE - /vpn/vpnservices/{id}
 
- Scope Types:
- project 
 
 - Delete a VPN service 
- get_vpnservice
- Default:
- (rule:admin_only) or (role:member and project_id:%(project_id)s)
- Operations:
- GET - /vpn/vpnservices
- GET - /vpn/vpnservices/{id}
 
- Scope Types:
- project 
 
 - Get VPN services 
