Bug #11296
open
Static route targets may still reachable via default route when the gateway they should route through is down
100%
Description
https://forum.netgate.com/topic/160103/static-routes-not-as-expected:
When WAN gateway is down, I can still access/ping stuff that is set "static route" thru the primary WAN.
`/etc/rc.gateway_alarm` must delete static routes entries for that gateway
Related issues
Updated by Viktor Gurov 6 months ago
Updated by Jim Pingle 6 months ago
- Status changed from New to Pull Request Review
- Target version set to CE-Next
Updated by Renato Botelho 5 months ago
- Status changed from Pull Request Review to Feedback
- Assignee set to Viktor Gurov
PR has been merged. Thanks!
Updated by Viktor Gurov 5 months ago
- % Done changed from 0 to 100
Applied in changeset 3fca57f8fae3733845c90338943c418bb77e68b7.
Updated by Alhusein Zawi 5 months ago
- Status changed from Feedback to Resolved
Fixed.
If WAN GW is down I cannot ping even if there was static route.
2.5.0-RELEASE (amd64)
built on Tue Feb 16 08:56:29 EST 2021
FreeBSD 12.2-STABLE
Updated by Jim Pingle 3 months ago
- Plus Target Version set to 21.05
Already present on 21.05 builds.
Updated by Jim Pingle 3 months ago
- Subject changed from When WAN gateway is down, I can still access/ping stuff that is set "static route" thru the primary WAN to Static route targets may still reachable via default route when the gateway they should route through is down
Updating subject for release notes.
Updated by Jim Pingle about 2 months ago
- Status changed from Resolved to New
- Target version changed from 2.5.2 to 2.6.0
- Plus Target Version changed from 21.05 to 21.09
Per Jim T, reverted this from 2.6.0 and 2.5.2. It appears to be causing some unintended side effects.
Can revisit a different approach, or perhaps making it optional and off by default, for the next release.
Updated by Jim Pingle about 2 months ago
- Status changed from New to Feedback
Applied in changeset 25b839d4990bd5e3f55b2eccbdea74d1d2b92d5d.
Updated by Jim Pingle 20 days ago
- Related to Regression #11986: Static routes are not installing properly on IPsec VTI links added