Project

General

Profile

Actions
Copy link

Bug #10190

closed

can't disable Phase 1 when Phase 2 is VTI

Added by Viktor Gurov almost 5 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Renato Botelho
Category:
IPsec
Target version:
2.4.5-p1
Start date:
01/17/2020
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Default
Affected Version:
2.4.4-p3
Affected Architecture:

Description

If you have assigned VTI interface and try to disable P2 entry, you will get:

Cannot disable a VTI Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P2.

ok, after removing the VTI interface assignment you can disable this Phase 2 entry

But if you try to disable this Phase 1 entry, you will get:

Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P2.

But P2 entry is disabled!

But, for example, if you switch P2 to tunnel mode, you can successfully disable P1

Actions
Copy link
 #2

Updated by Jim Pingle almost 5 years ago

  • Status changed from New to Pull Request Review
  • Target version set to 2.5.0
Actions
Copy link
 #3

Updated by Renato Botelho almost 5 years ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Renato Botelho
  • % Done changed from 0 to 100

PR has been merged. Thanks!

Actions
Copy link
 #4

Updated by Viktor Gurov almost 5 years ago

  • Status changed from Feedback to Resolved

Renato Botelho wrote:

PR has been merged. Thanks!

tested on 2.5.0.a.20200119.2335

works as expected

Actions
Copy link
 #5

Updated by Jim Pingle over 4 years ago

  • Target version changed from 2.5.0 to 2.4.5-p1
Actions
Copy link
 #6

Updated by Marcos M over 3 years ago

This fixes the issue where a P1 can't be disabled if it has an inactive P2 in VTI mode.

An issue remains if the P2 is active/enabled and one tries to disable the P1. See #11792

Actions
Copy link

Also available in: Atom PDF