Re: CARP and isakmpd ipsec

2005-06-16 Thread HÃ¥kan Olsson
On 16 jun 2005, at 16.45, Stephen Marley wrote: Is this known behaviour with the code in its current state, or should I be looking at my configuration or reporting a problem? Yes, I've seen it. Unfortunately I have lots of other work at the moment, so it'll probably be a week or so before

Re: CARP and isakmpd ipsec

2005-06-16 Thread Stephen Marley
On Tue, Jun 07, 2005 at 12:34:06AM +, Ryan McBride wrote: > On Tue, Jun 07, 2005 at 01:06:53AM +0100, Stephen Marley wrote: > > Is there a way to make a pair of carp hosts to renegotiate with an > > existing ipsec peer when a new carp master is elected? I tried it once > > and it didn't work ou

Re: CARP and isakmpd ipsec

2005-06-06 Thread Stephen Marley
On Tue, Jun 07, 2005 at 12:34:06AM +, Ryan McBride wrote: > On Tue, Jun 07, 2005 at 01:06:53AM +0100, Stephen Marley wrote: > > Is there a way to make a pair of carp hosts to renegotiate with an > > existing ipsec peer when a new carp master is elected? I tried it once > > and it didn't work ou

Re: CARP and isakmpd ipsec

2005-06-06 Thread Ryan McBride
On Tue, Jun 07, 2005 at 01:06:53AM +0100, Stephen Marley wrote: > Is there a way to make a pair of carp hosts to renegotiate with an > existing ipsec peer when a new carp master is elected? I tried it once > and it didn't work out. If the connection to the ipsec peer is not passive, you can use if

Re: CARP and isakmpd ipsec

2005-06-06 Thread Sean Knox
Stephen Marley wrote: Is there a way to make a pair of carp hosts to renegotiate with an existing ipsec peer when a new carp master is elected? I tried it once and it didn't work out. Hakan is working on sasync that synchronize IPSec SAs, but as of May 25th, it's not ready for public consumpt