75878e8f3c
The mwan3 with IPsec does not work in a failover scenario as expected. Because the default table is used for an lookup which traffic should be encrypt. The traffic for encryption is sent out on the interface with the lowest metric. No matter which interface is currently seen as connected by the mwan3. In order for this that mwan3 could work with IPsec, an additional metric is set that indicates which interface is currently connected. And the interface with the lowest 'online_metric' is used as the IPsec interface. If the interface is not considered connected by the mwan3, then the online_metric for this interface is not set and the next route with an higher metric is used. Signed-off-by: Florian Eckert <fe@dev.tdt.de> |
||
|---|---|---|
| .. | ||
| mwan3 | ||