Hi,
we have an failover-test-setup looking like below:
+--------CARP0-HOST(M)-CARP1------(WAN)
|
(WAN)------------RemoteHost-------RemotLAN
+--------CARP0-HOST(B)-CARP1------(WAN)
|
|
LocalLAN
ipsec(isakmpd) is setup to build a vpn between LocalLAN and RemoteLAN.
Host (M) + Host (B) syncing via pfsync and sasync using
"LocalLAN"-Addresses.
The ipsec-tunnel from LocalLAN to RemoteLAN is running well until I
break up e.g. the ( "WAN" ) Connection on Host (M) Carp1 to the Remote
Host.
HOST(B) gets "Carp"-Master as expected, SA's seems to get synced too but
the tunnel fails to "failover" and the RemoteHost complains about
dropped messages "due to notification type invalid_cookie".
I need to shutdown and restart the isakmpd at the RemoteHost for
"repair" the VPN-Tunnel ...
Any Ideas ?
We tried this using 3.7 current.
Kind regards,
Stefan
