2013/12/5 Anders Berggren <and...@halon.se> > > Interesting. I've got sasyncd to work pretty well by introducing a rather > long sleep before restoring the carp demote, with my main problem being the > fallback/restore to the designated master after a short period of the > backup being active (the failover from master to backup works well). > However, with a "standard" IKE config, the tunnel restores itself within > some time. I'm keen on debugging sasyncd; was you issues similar? > > I've seen this too. First flip goes fine, flip back is "easiest" done by ipsecctl flush-and-load and then it starts behaving as expected again.
-- May the most significant bit of your life be positive.