[strongSwan] need help with strongswan HA setup

Andreas Steffen andreas.steffen at strongswan.org
Tue Nov 1 12:21:48 CET 2011


Hello Gaurav,

have you tried the ha-2.6.36.patch patch found on the download page?

http://download.strongswan.org/uml/

Regards

Andreas

On 01.11.2011 11:08, gaurav sharma wrote:
> Hi Martin,
> Appropriate your valuable inputs,
> I am trying to apply kernal patches attached in the strongswan HA wiki link,
> Can you please conform the linux kernal version for which these patches
> were created. ?
> I am not able to apply patches on kernal version 2.6.31.5 as there are
> some conflicts.
> 
> We also find that the changes required in ipt_CLUSTERIP.c file (Patch :
> Extended CLUSTERIP module to use it on IPSec gateway) are only valid for
> 2.6.39 in the Strongswan git  repository and we may not able to apply
> the same on 2.6.31.
> 
> Regds
> Gaurov
> 
> On Fri, Oct 21, 2011 at 2:29 PM, gaurav sharma <gaurav19007 at gmail.com
> <mailto:gaurav19007 at gmail.com>> wrote:
> 
>     Ok I understand now,
>     Thank you very much for your precious time and help.
>      
>     Regards,
>     Gaurav
> 
>     On Fri, Oct 21, 2011 at 2:14 PM, Martin Willi <martin at strongswan.org
>     <mailto:martin at strongswan.org>> wrote:
> 
>         Hi,
> 
>         > The HA setup supported by Strongswan is Active/Active or
>         > Active/standby ?
> 
>         It supports Active/Active configurations, but each CHILD_SA is
>         actually
>         Active/Passive. The active node might be different for each
>         CHILD_SA,
>         resulting in a load sharing between the two nodes if you run
>         more than a
>         single CHILD_SA.
> 
>         You may also run on Active/Passive setup only be defining just a
>         single
>         segment.
> 
>         > Are there any document apart from Above link which can be
>         refered for
>         > Strongswan HA?
> 
>         No, the Wiki page is currently all we have.
> 
>         Regards
>         Martin

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4489 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20111101/7dfb0250/attachment.bin>


More information about the Users mailing list