[Openswan Users] Re: 2 NICs(in a single host) to 1 NIC ipsec tenneling concurrently

[Nate Carlson]

On Fri, 14 May 2004, yi min wrote:
> I hope to connect from VPN Box A" to VPN Box B" with using two ipsec
> tunnels concurrently.
> 
> but In spite of configuring as below structure and ipsec configurations,
> unfortunately I can not success
> 
> if i try to connect GRE connection, first of all i think to be able to
> use GRE after successing in IPsec Tunneling
> 
> I wanna know about the methods of dual(redundant)ipsec tunnels from each
> others 2 NIC of a VPN Box A" to a same destination NIC of VPN Box B"
>   
> 10.0.1.0/24===1.2.3.4---3.4.5.6...x.x.x.x---x.x.x.y ===10.0.0.0/24
> 10.0.1.0/24===2.3.4.5---2.3.4.10...x.x.x.x---x.x.x.y ===10.0.0.0/24

As far as I know, it's not currently possible to have two tunnels up to
the same destination at the same time. One of the developers want to
comment on this?

One thing you could do is bring whichever one you want to use as primary
up by default, and write a script to monitor the tunnel, and down it and
bring the secondary one up if it dies.

------------------------------------------------------------------------
| nate carlson | natecars at natecarlson.com | http://www.natecarlson.com |
|       depriving some poor village of its idiot since 1981            |
------------------------------------------------------------------------