[strongSwan] stateless high availability
Olivier PELERIN
olivier_pelerin at hotmail.com
Fri Feb 27 11:34:42 CET 2015
Thanks Martin!
At least I know that I need to find an another solution [ eg Virtual-IP on the remote end]
Regards,
> Subject: Re: [strongSwan] stateless high availability
> From: martin at strongswan.org
> To: olivier_pelerin at hotmail.com
> CC: users at lists.strongswan.org
> Date: Fri, 27 Feb 2015 10:29:18 +0100
>
> Hi,
>
> > Is there a way to configure a device to connect to a gateway [ eg
> > 10.1.1.254]. If that gateway fails [ detected via DPD],it would
> > connect to 10.1.1.253 [ his backup gateway]?
>
> No, specifying fallback addresses is currently not implemented in
> strongSwan.
>
> > I've tried with right=10.1.1.254,10.1.1.253
>
> Specifying multiple addresses is supported, but it currently works only
> for matching the endpoints of connection attempts to configurations.
>
> > it does not seems to work [ it expects an identity
> > 10.1.1.254,10.1.1.253 on the remote.
>
> rightid defaults to right, so if you have more than a single address,
> you should define rightid explicitly. But as said, having multiple
> addresses in right currently does not what you intend.
>
> Regards
> Martin
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150227/1676e4b6/attachment.html>
More information about the Users
mailing list