strongSwan KVM Tests / ha / active-passive-multi-ke
Test ha/active-passive-multi-ke
Description
The roadwarriors carol and dave set up a connection each using multiple key exchanges to the virtual gateway mars implemented by the two real gateways alice and moon in a High Availability (HA) setup based on ClusterIP. The HA synchronization link between the two gateways is secured by an IPsec transport connection. At the outset alice is the active and moon is the passive gateway. After alice gets killed moon automatically takes over all existing IKE_SAs and CHILD_SAs.