strongSwan KVM Tests / ha / active-passive

Test ha/active-passive

Description

The roadwarriors carol and dave set up a connection each to the virtual gateway mars implemented by the two real gateways alice and moon in a High Availability (HA) setup based on ClusterIP. The HA synchronization link between the two gateways is secured by an IPsec transport connection. At the outset alice is the active and moon is the passive gateway. After alice gets killed moon automatically takes over all existing IKE_SAs and CHILD_SAs. alice venus moon carol winnetou dave

alice

 

moon

 

carol

 

dave

 

tcpdump