Confirm that Firewall as a Service is ready for use

Verify that Firewall as a Service is active (FWaaS) in your deployment.

Before you begin

  • You have the oc command line tool installed on your workstation.
  • You are logged on to a workstation that has access to the RHOSO control plane as a user with cluster-admin privileges.

Procedure

  1. Access the remote shell for the OpenStackClient pod from your workstation: 
    $ oc rsh openstackclient
  2. Verify that the fwaas_v2 Neutron API extension is available in your environment: 
    $ openstack extension list --network | grep -i fwaas

    A successful verification produces output similar to the following:

    Sample output:

    | FWaaS v2   | fwaas_v2          | Provides support for firewall-as-a-service version 2   |
  3. Verify that the corresponding service provider is available: 
    $ openstack network service provider list

    A successful verification produces output similar to the following:

    +------------------+----------+---------+
| Service Type     | Name     | Default |
+------------------+----------+---------+
| L3 ROUTER NAT    | ovn      | True    |
| FIREWALL_V2      | fwaas_ovn | True   |
+------------------+----------+---------+
  4. Exit the openstackclient pod: 
    $ exit