Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
MIME-Version: 1.0
Sender: williamstevens@gmail.com
In-Reply-To: <CAOk+CUoQH48QD1mVW-383BYAcRexEZKUng-COPgw=gOFipT2Cg@mail.gmail.com>
References: <CAOk+CUoQH48QD1mVW-383BYAcRexEZKUng-COPgw=gOFipT2Cg@mail.gmail.com>
From: Will Stevens <wstevens@cloudops.com>
Date: Tue, 6 Jun 2017 10:42:33 -0400
Message-ID: <CAC2panqQfA9uWwyik+crN5Fb1JM+C=VrzNk_7M+WPLBPUhWhDA@mail.gmail.com>
Subject: Re: Site-to-site VPN Connection via API
To: "dev@cloudstack.apache.org" <dev@cloudstack.apache.org>
Content-Type: multipart/alternative; boundary="001a11352e464fcae705514ba1a2"
archived-at: Tue, 06 Jun 2017 14:42:40 -0000

--001a11352e464fcae705514ba1a2
Content-Type: text/plain; charset="UTF-8"

What version of ACS are you using?  The implementation has changed a few
times recently, so it is an important detail.

Cheers,

*Will Stevens*
CTO

<https://goo.gl/NYZ8KK>

On Tue, Jun 6, 2017 at 10:30 AM, Andre Jacques <ajacques@cloudops.com>
wrote:

> Hi there,
>
> I am currently creating Site-to-site VPN between
> different instance of CloudStack using the
> CloudStack API. Let's say I've got VPC_A in ENV_A
> and VPC_B in ENV_B. We create VpnCustomerGateway
> VCG_TO_B (IP Source NAT and CIDR of VPC_B in the
> ENV_A) and VCG_TO_A (IP Source NAT and CIDR of
> VPC_A in the ENV_B). I make sure both has the same
> preshared-key, IKE Policy and ESP Policy.
>
> Then I create the VpnGateway for VPC_A and VPC_B,
> then create the VpnConnection in VPC_A using the
> VCG_TO_B VpnCustomerGateway. I make sure the
> "passive" is checked, since the VPC_B is not yet
> configured. This call does return a 200 OK HTTP
> Status Code along with the data I need to refresh
> my UI.
>
> Then the problem start. When I come to create the
> VpnConnection in VPC_B to connect at VCG_TO_A
> VpnCustomerGateway, generally I will receive a 534
> with the error message saying "Host with specified
> id is not in the right state: Down". The problem
> I've got with this is since I receive a 5xx error
> code, my presumption is that the VpnConnection has
> not been created, but it did. I know that the
> "Connection" has been established and there is an
> "Error" in that regard, nothing that a refresh
> can't solve, but I believe that if the
> VpnConnection is created properly in CloudStack,
> regardless of its state, it should be returned
> along with a 200 OK Status Code.
>
> Thank you for your time,
>
> A. Jacques
> Stagiaire - Intern
> t 514.447.3456
>

--001a11352e464fcae705514ba1a2--