File:  [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / testing / tests / ha / both-active / description.txt
Revision 1.1.1.1 (vendor branch): download - view: text, annotated - select for diffs - revision graph
Wed Jun 3 09:46:48 2020 UTC (4 years, 10 months ago) by misho
Branches: strongswan, MAIN
CVS tags: v5_9_2p0, v5_8_4p7, HEAD
Strongswan

The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each 
to the virtual gateway <b>mars</b> implemented by the two real gateways
<b>alice</b> and <b>moon</b> in a <b>High Availability</b> (HA) setup 
based on <b>ClusterIP</b>. Depending on the hash of the IP addresses of the peers
and the SPIs, the inbound and outbound CHILD_SAs are either assigned to
segment 1 managed by <b>alice</b> or segment 2 handled by <b>moon</b>.
The IKEv2 protocol is managed by <b>alice</b> exclusively with passive
IKE_SAs installed on the backup gateway <b>moon</b>.

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>