openstack
/
tripleo-ipsec
Code Issues Proposed changes

Remove keyintries=1 from node-to-node template 

Using that was prone to errors, since a temporary issue could screw
the setting up of the tunnels.

Change-Id: I87bd590313a21a34eaba1385f28cfcd524c2fb70
This commit is contained in:
Juan Antonio Osorio Robles 2018-01-05 15:24:42 +00:00
parent 40b2f4e049
commit 743f4ce023
2 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
templates/ipsec-node-to-node-private-or-clear.conf.j2
View File

@ -16,7 +16,6 @@ conn overcloud-private-node-to-node-{{ network }}-ip-{{ loop.index0 }}
failureshunt=passthrough
ikev2=insist
auto=start
keyingtries=1
retransmit-timeout=2s
phase2alg={{ ipsec_algorithm }}
{% endfor %}

1
templates/ipsec-node-to-node-private.conf.j2
View File

@ -14,7 +14,6 @@ conn overcloud-private-node-to-node-{{ network }}-ip-{{ loop.index0 }}
failureshunt=drop
ikev2=insist
auto=start
keyingtries=1
retransmit-timeout=2s
phase2alg={{ ipsec_algorithm }}
{% endfor %}