- The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each 
 
- to the virtual gateway <b>mars</b> implemented by the two real gateways
 
- <b>alice</b> and <b>moon</b> in a <b>High Availability</b> (HA) setup 
 
- based on <b>ClusterIP</b>. The HA synchronisation link between the two
 
- gatways is secured by an IPsec transport connection. At the outset
 
- <b>alice</b> is the active and <b>moon</b> is the passive gateway.
 
- After <b>alice</b> gets killed <b>moon</b> automatically takes over
 
- all existing IKE_SAs and CHILD_SAs.
 
 
  |