Project

General

Profile

Actions

Bug #10190

closed

can't disable Phase 1 when Phase 2 is VTI

Added by Viktor Gurov over 2 years ago. Updated about 1 year ago.

Status:
Resolved
Priority:
Normal
Category:
IPsec
Target version:
Start date:
01/17/2020
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
2.4.4-p3
Affected Architecture:

Description

If you have assigned VTI interface and try to disable P2 entry, you will get:

Cannot disable a VTI Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P2.

ok, after removing the VTI interface assignment you can disable this Phase 2 entry

But if you try to disable this Phase 1 entry, you will get:

Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P2.

But P2 entry is disabled!

But, for example, if you switch P2 to tunnel mode, you can successfully disable P1

Actions #2

Updated by Jim Pingle over 2 years ago

  • Status changed from New to Pull Request Review
  • Target version set to 2.5.0
Actions #3

Updated by Renato Botelho over 2 years ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Renato Botelho
  • % Done changed from 0 to 100

PR has been merged. Thanks!

Actions #4

Updated by Viktor Gurov over 2 years ago

  • Status changed from Feedback to Resolved

Renato Botelho wrote:

PR has been merged. Thanks!

tested on 2.5.0.a.20200119.2335

works as expected

Actions #5

Updated by Jim Pingle about 2 years ago

  • Target version changed from 2.5.0 to 2.4.5-p1
Actions #6

Updated by Marcos Mendoza about 1 year ago

This fixes the issue where a P1 can't be disabled if it has an inactive P2 in VTI mode.

An issue remains if the P2 is active/enabled and one tries to disable the P1. See #11792

Actions

Also available in: Atom PDF