Project

General

Profile

Actions
Copy link

Bug #10351

closed

Saving IPSEC connection breaks FRR BGP on VTI interfaces

Added by Steven Brown about 4 years ago. Updated almost 4 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Renato Botelho
Category:
IPsec
Target version:
2.4.5-p1
Start date:
03/17/2020
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.4.4-p3
Affected Architecture:

Description

I believe this is related to Bug #9668.

When editing a Phase 1 IPSEC connection and clicking save and then apply, the FRR BGP on VTI interfaces will break.

I've applied the patch ID 7ba8d654582d452103c78faf63bacd4385177537 to the system and it does not fix the problem.

If I manually run /etc/rc.newipsecdns from the CLI while in a failed state, the FRR BGP will eventually restart, such that I believe a callback to ipsec_reload_package_hook() is needed somewhere else.

Actions
Copy link

Also available in: Atom PDF