Cluster VPN enables encryption between the cluster nodes for software-defined storage (SDS). Cluster VPN can only be set up on a cluster containing two or more nodes.
Cluster VPN has two states, either enabled or disabled. Cluster VPN is enabled when the VPN is set up and started or restarted. Cluster VPN is disabled when the VPN service is stopped or disabled.
During an upgrade, IPSec VPN is not affected. If migrating, IPSec VPN configures the new nodes. If adding a node, IPSec is reconfigured on all the nodes and adds the new node to the tunnel configuration.