From 0b4ad4c94cd19bf5768ef2125ad2d1997de17de7 Mon Sep 17 00:00:00 2001 From: Juan Antonio Osorio Robles Date: Fri, 1 Dec 2017 06:32:19 +0000 Subject: [PATCH] Make VIP tunnels use IKEv2 --- templates/ipsec-vip-tunnels.conf.j2 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/templates/ipsec-vip-tunnels.conf.j2 b/templates/ipsec-vip-tunnels.conf.j2 index bb908e6..efe74d8 100644 --- a/templates/ipsec-vip-tunnels.conf.j2 +++ b/templates/ipsec-vip-tunnels.conf.j2 @@ -13,6 +13,7 @@ conn overcloud-{{ current_vip.name }}-vip-tunnel dpdtimeout=15 phase2alg={{ ipsec_algorithm }} failureshunt=drop + ikev2=insist {% endif %} @@ -28,3 +29,4 @@ conn overcloud-{{ current_vip.name }}-node-to-vip-tunnel dpdtimeout=15 phase2alg={{ ipsec_algorithm }} failureshunt=drop + ikev2=insist