IPsec VTI tunnel between IPv6 peers may not configure correctly
The error in https://forum.netgate.com/post/965928 implies that an IPsec tunnel using VTI between two IPv6 peers may not be properly configuring the interface.
rc.bootup: The command '/sbin/ifconfig 'ipsec3000' inet tunnel '' '2001:xxx:xxxx:xxx::1' up' returned exit code '1', the output was 'ifconfig: error in parsing address string: Name does not resolve'
ipsec_get_phase1_src($ph1ent) is returning an empty result so
$left_spec is empty in source:src/etc/inc/interfaces.inc#L1640 leading it to wrongly guess the address family and omit the local address for the interface.
Move interfaces_ipsec_vti_configure() to the end of interfaces_configure(). Issue #11537
IPsec VTI interfaces bootup fix. Issue #11537
(cherry picked from commit cfff0f351c74599d61286ce0161e570e587e5aac)
#1 Updated by Viktor Gurov about 2 months ago
same issue with IPv4 VTI:
Feb 26 16:25:59 pf41 php: rc.bootup: The command '/sbin/ifconfig 'ipsec4000' inet tunnel '' '192.168.88.51' up' returned exit code '1', the output was 'ifconfig: error in parsing address string: Name does not resolve'
it tries to setup VTI interfaces before parent interfaces