Hi, Yes. I think It is possible. You need to create new endpoint groups which include the current subnet and a new subnet. Then just update the ipsec connections with corresponding endpoints.
Best regards, Hoang From: vidyadhar reddy [mailto:vidyadharredd...@gmail.com] Sent: Thursday, March 22, 2018 4:06 PM To: Cao, Xuan Hoang Subject: Re: [openstack-dev] [Neutron][vpnaas] Hello Hoang, i have tried the subnet grouping seems like its working, but that method is fine when we have n subnets before setting up the vpnaas, but i just wanted to know if there is any method where we can add subnets to the existing vpnaas connection so that the newly entered subnets can communicate using the vpnaas connection which is already there. Best Regards, vidyadhar reddy On Wed, Mar 21, 2018 at 3:54 AM, hoan...@vn.fujitsu.com<mailto:hoan...@vn.fujitsu.com> <hoan...@vn.fujitsu.com<mailto:hoan...@vn.fujitsu.com>> wrote: Hi, IIUC, your use case is to connect 4 subnets from different sites (2 subnets for each site). If so, did you try with endpoint group? If not, please refer the following docs for more detail about how to try and get more understanding [1][2] [1] https://docs.openstack.org/neutron/latest/admin/vpnaas-scenario.html#using-vpnaas-with-endpoint-group-recommended [2] https://docs.openstack.org/neutron-vpnaas/latest/contributor/multiple-local-subnets.html BRs, Cao Xuan Hoang, From: vidyadhar reddy [mailto:vidyadharredd...@gmail.com<mailto:vidyadharredd...@gmail.com>] Sent: Tuesday, March 20, 2018 4:31 PM To: openstack-dev@lists.openstack.org<mailto:openstack-dev@lists.openstack.org> Subject: [openstack-dev] [Neutron][vpnaas] Hello, i have a general question regarding the working of vpnaas, can we setup multiple vpn connections on a single router? my scenario is lets say we have two networks net 1 and net2 in two different sites respectively, each network has two subnets, two sites have one router in each, with three interfaces one for the public network and remaining two for the two subnets, can we setup a two vpnaas connections on the routers in each site to enable communication between the two subnets in each site. i have tried this setup, it didn't work for me. just wanted to know if it is a design constraint or not, i am not sure if this issue is under development, is there any development going on or is it already been solved? BR, Vidyadhar reddy peddireddy
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
