2008/523 IPsec session failover

[Thejaswini Singarajipura]

Robert Gordon wrote:
>
> On Aug 14, 2008, at 4:44 PM, Bill Sommerfeld wrote:
>
>> The hook functions are enabled only
>> when Solaris is in cluster mode.
>
> Is that a programmatic interface ?

In the Kernel, it is function pointers initialized  by Sun Cluster 
initialization module. In the User land, it is a socket interface over 
the loopback address which is used only if the node is booted in cluster 
mode using Sun Cluster.  Solaris provides an interface to check the 
status of the node (clustered or non clustered) using Sun Cluster.
>
> Could (from an architectural POV) this feature be enabled with out the
> presence of SUN Cluster, and if not why not ??  (I'm just curious..)
>
The SA migration is enabled only if the  cluster is booted in cluster 
mode  using SC.

The IKE DPD is enabled on a non-clustered environment also.

Regards,
Thejaswini
> Robert.
>