Re: [strongSwan] need help with strongswan HA setup

2011-11-01 Thread Andreas Steffen
Hello Gaurav, have you tried the ha-2.6.36.patch patch found on the download page? http://download.strongswan.org/uml/ Regards Andreas On 01.11.2011 11:08, gaurav sharma wrote: Hi Martin, Appropriate your valuable inputs, I am trying to apply kernal patches attached in the strongswan HA

Re: [strongSwan] need help with strongswan HA setup

2011-11-01 Thread Martin Willi
Hi, We also find that the changes required in ipt_CLUSTERIP.c file (Patch : Extended CLUSTERIP module to use it on IPSec gateway) are only valid for 2.6.39 in the Strongswan git repository and we may not able to apply the same on 2.6.31. Our git repository has tags with patches for

Re: [strongSwan] need help with strongswan HA setup

2011-10-21 Thread Martin Willi
Hi Gaurav, 1.apart from strongswan.conf file changes, is it needed to put the kernal patch as specfied in above link, Yes, the kernel patch is definitely required. Otherwise the CLUSTERIP kernel module is unable to forward traffic as a gateway at all and can't handle IPsec traffic as the HA

Re: [strongSwan] need help with strongswan HA setup

2011-10-21 Thread gaurav sharma
Hi Martin, Thank you very much for your time, I just have one more query, The HA setup supported by Strongswan is Active/Active or Active/standby ? Because the link given for strongswan HA sayes Both active. Are there any document apart from Above link which can be refered for Strongswan HA?

Re: [strongSwan] need help with strongswan HA setup

2011-10-21 Thread gaurav sharma
Ok I understand now, Thank you very much for your precious time and help. Regards, Gaurav On Fri, Oct 21, 2011 at 2:14 PM, Martin Willi mar...@strongswan.org wrote: Hi, The HA setup supported by Strongswan is Active/Active or Active/standby ? It supports Active/Active configurations,