Hi Gaurav, > 1.apart from strongswan.conf file changes, is it needed to put the > kernal patch as specfied in above link, Yes, the kernel patch is definitely required. Otherwise the CLUSTERIP kernel module is unable to forward traffic as a gateway at all and can't handle IPsec traffic as the HA plugin expects it. Regards Martin