It is found that ipsec-config SM service takes about 57s to stop during
controller swact. This is caused by the blocking command
"swanctl --terminate" in ipsec-config's ocf script. This change added
"--force" option to the command so it will terminate IKE_SA without
waiting. The stop time is reduced to about 12s with this change.
Test Plan:
PASS: On a DX system, swact active controller, multiple times, verify
the swact is successful, system is stable after swact, IPsec is
properly configured and SAs are established as expected.
PASS: Multiple iterations of controlled and uncontrolled swact on HW
labs, verify there are no issues arise.
Story: 2010940
Task: 51242
Change-Id: I68474c6373ccf1941d05943c9b3906b436e1f788
Signed-off-by: Andy Ning <andy.ning@windriver.com>
d662842c86