[strongSwan] Automated test ha/both-active fails

Daniel Palomares palomaresdaniel at gmail.com
Fri Jun 29 11:27:59 CEST 2012


Is this the new feature of High Availability for IPsec RFC-6311 ?
Does this patch generate IKE exchanges to increases IPsec Counters?

I thought that the first patches didn't increase the IPsec replay counters.
Is this a new feature in ha3.3? Or since when did you developed this

Kind regards


2012/6/27 Martin Willi <martin at strongswan.org>

> Hi Stéphanie,
> > I am running the automated tests. The scenario ha/both-active fails. I
> > downloaded linux-3.3.2.tar.bz2, config-3.3, gentoo-fs-20111212.tar.bz2
> > and  strongswan-4.6.4.tar.bz2.
> While I don't know where you got these kernel sources from, I'd guess
> they don't contain the HA patchset. You'd have to get them from [1] and
> build your kernel with it.
> However, just for running the test suite, it's probably not worth the
> effort. The HA functionality is very specific, and not very trivial to
> set up. Unless you have plans to do a real HA installation, I'd
> recommend to just skip (delete) that test.
> Regards
> Martin
> [1]
> http://git.strongswan.org/?p=linux-dumm.git;a=shortlog;h=refs/tags/ha-3.3
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120629/3a18c531/attachment.html>

More information about the Users mailing list