Hi,

> In that particular configuration (no monitoring/heartbeat) stopping
> charon on the active node should clear the connections on the remote
> gateway (OK) and on the other node (not OK), right?

The active node will delete the IKE_SA, and send a close event to the
passive node.

If you are not using the ha plugin heartbeat, you probably should make
the other node active first (responsible for all IKE_SAs) before
shutting down a node.

Regards
Martin

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to