added ha/both-active scenario

This commit is contained in:
Andreas Steffen
2010-11-20 20:16:26 +01:00
parent 841b2b3ee9
commit 4a8ebe0b35
22 changed files with 555 additions and 0 deletions
@@ -0,0 +1,8 @@
The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each
to the virtual gateway <b>mars</b> implemented by the two real gateways
<b>alice</b> and <b>moon</b> in a <b>High Availability</b> (HA) setup
based on <b>ClusterIP</b>. Depending on the hash of the IP addresses of the peers
and the SPIs, the inbound and outbound CHILD_SAs are either assigned to
segment 1 managed by <b>alice</b> or segment 2 handled by <b>moon</b>.
The IKEv2 protocol is managed by <b>moon</b> exclusively with passive
IKE_SAs installed on the backup gateway <b>alice</b>.