Project

General

Profile

Actions

Bug #11296

open

Static route targets may still reachable via default route when the gateway they should route through is down

Added by Viktor Gurov about 1 year ago. Updated about 2 months ago.

Status:
New
Priority:
Normal
Assignee:
Category:
Routing
Target version:
Start date:
01/23/2021
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
22.05
Release Notes:
Default
Affected Version:
2.4.5-p1
Affected Architecture:

Description

https://forum.netgate.com/topic/160103/static-routes-not-as-expected:
When WAN gateway is down, I can still access/ping stuff that is set "static route" thru the primary WAN.

`/etc/rc.gateway_alarm` must delete static routes entries for that gateway

same issue on 2.5.0.a.20210121.2350
see also #9969 #10001


Related issues

Related to Regression #11986: Static routes may not be in routing table when expectedResolved06/02/2021

Actions
Actions #2

Updated by Jim Pingle about 1 year ago

  • Status changed from New to Pull Request Review
  • Target version set to CE-Next
Actions #3

Updated by Renato Botelho 11 months ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Viktor Gurov

PR has been merged. Thanks!

Actions #4

Updated by Viktor Gurov 11 months ago

  • % Done changed from 0 to 100
Actions #5

Updated by Alhusein Zawi 11 months ago

  • Status changed from Feedback to Resolved

Fixed.

If WAN GW is down I cannot ping even if there was static route.

2.5.0-RELEASE (amd64)
built on Tue Feb 16 08:56:29 EST 2021
FreeBSD 12.2-STABLE

Actions #6

Updated by Jim Pingle 11 months ago

  • Target version changed from CE-Next to 2.6.0
Actions #7

Updated by Jim Pingle 9 months ago

  • Plus Target Version set to 21.05

Already present on 21.05 builds.

Actions #8

Updated by Jim Pingle 9 months ago

  • Subject changed from When WAN gateway is down, I can still access/ping stuff that is set "static route" thru the primary WAN to Static route targets may still reachable via default route when the gateway they should route through is down

Updating subject for release notes.

Actions #9

Updated by Jim Pingle 8 months ago

  • Target version changed from 2.6.0 to 2.5.2
Actions #10

Updated by Jim Pingle 8 months ago

  • Status changed from Resolved to New
  • Target version changed from 2.5.2 to 2.6.0
  • Plus Target Version changed from 21.05 to 21.09

Per Jim T, reverted this from 2.6.0 and 2.5.2. It appears to be causing some unintended side effects.

Can revisit a different approach, or perhaps making it optional and off by default, for the next release.

Actions #11

Updated by Jim Pingle 8 months ago

  • Status changed from New to Feedback
Actions #12

Updated by Jim Pingle 8 months ago

  • Status changed from Feedback to New
Actions #13

Updated by Jim Pingle 7 months ago

  • Related to Regression #11986: Static routes may not be in routing table when expected added
Actions #14

Updated by Jim Pingle 5 months ago

  • Plus Target Version changed from 21.09 to 22.01

Moving ahead, too close to release to make another attempt at this and have enough time to validate the change in behavior.

Actions #15

Updated by Jim Pingle 3 months ago

  • Plus Target Version changed from 22.01 to 22.05
Actions #16

Updated by Jim Pingle 3 months ago

  • Target version changed from 2.6.0 to CE-Next
Actions #17

Updated by Alhusein Zawi 2 months ago

Static route is still reachable while WAN gateway is Marked Gateway as Down.

22.01.a.20211120.0600

Actions #18

Updated by Jocelyn Viau about 2 months ago

Thank you for reporting this issue, I have a very similar problem. In my case, I added a static route that goes through a routed IPSec tunnel (VTI). When the tunnel goes down, the traffic for that static route still tries to go through the tunnel and get lost. When the tunnel is down or the IPSec VTI gateway is unreacheable, I would like the static route that uses the VTI Gateway to be removed from the routing table and have the traffic be routed using the remaining routing table.

Actions

Also available in: Atom PDF