Project

General

Profile

Actions

Feature #3806

closed

Strongswan and CARP, initiator options

Added by Jim Pingle about 11 years ago. Updated about 10 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Ermal Luçi
Category:
IPsec
Target version:
-
Start date:
08/15/2014
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

Putting this in a ticket so it isn't forgotten:

Currently strongswan attempts to initiate, which may not play well with CARP. It would be necessary in that case to be able to configure strongswan to selectively either act as initiator or as a passive responder.

We could also do a similar action to OpenVPN where we automatically account for this when a CARP VIP is detected for binding.

Actions

Also available in: Atom PDF