foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

network: Use insecure password for keepalived

Browse source 
Using AH based authentication generates duplicate announces from master:

  IPSEC-AH : sequence number 34831 already processed. Packet dropped.

Use insecure (unencrypted) authentication for announcement pakets until
this is sorted out.
This commit is contained in:
Timo Makinen 2021-03-19 21:21:27 +00:00
parent ba97c88303
commit c91db784e1
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/network/templates/keepalived.conf.j2
View file

@ -12,7 +12,7 @@ vrrp_instance VI_{{ vip.vhid }} {
priority {{ vip.priority }} priority {{ vip.priority }}
{% endif %} {% endif %}
authentication { authentication {
auth_type AH auth_type PASS
auth_pass {{ vip.pass }} auth_pass {{ vip.pass }}
} }
virtual_ipaddress { virtual_ipaddress {