Project

General

Profile

Actions
Copy link

Bug #11792

closed
MM VG

Cannot disable IPsec P1 when related P2s are in VTI mode and enabled

Bug #11792: Cannot disable IPsec P1 when related P2s are in VTI mode and enabled

Added by Marcos M over 5 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Viktor Gurov
Category:
IPsec
Target version:
2.5.2
Start date:
04/08/2021
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
21.05
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

Setup:
IPsec Phase 1 with one or more Phase 2 entries in VTI mode. No IPsec interfaces assigned.

Issue:
While both P1 and P2 are enabled, try disabling the P1. The following error is shown:

Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P2.

Expected:
  1. When clicking disable on P1, the P1 along with all its P2s should be disabled to match the behavior of non-vti P2s - as long as related IPsec interfaces are assigned.
  2. The error description should say:
    Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P1.

This is related to #10190

Related issues 1 (0 open — 1 closed)

Related to Bug #12198: Disabling an IPsec phase 1 entry does not disable related phase 2 entriesResolvedViktor Gurov

Actions

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #2

  • Status changed from New to Pull Request Review
  • Target version changed from CE-Next to 2.6.0

VG Updated by Viktor Gurov over 5 years ago Actions
Copy link
 #3

  • Status changed from Pull Request Review to Feedback
  • % Done changed from 0 to 100

Applied in changeset commit:66c5f2959f391760eb8f1728131792161067a7d8.

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #4

  • Plus Target Version set to 21.05

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #5

Already in 21.05 branch.

MM Updated by Marcos M over 5 years ago Actions
Copy link
 #6

Tested latest snapshot. Worked well.

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #7

Marcos Mendoza wrote:

Tested latest snapshot. Worked well.

2.6.0 snapshot or 21.05 snapshot?

MM Updated by Marcos M over 5 years ago Actions
Copy link
 #8

Tested on both 21.05 and 2.6.0 snapshots.

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #9

  • Status changed from Feedback to Closed

JP Updated by Jim Pingle over 5 years ago Actions
Copy link
 #10

  • Target version changed from 2.6.0 to 2.5.2

RB Updated by Renato Botelho over 5 years ago Actions
Copy link
 #11

  • Assignee set to Viktor Gurov

VG Updated by Viktor Gurov about 5 years ago Actions
Copy link
 #12

  • Related to Bug #12198: Disabling an IPsec phase 1 entry does not disable related phase 2 entries added
Actions
Copy link

Also available in: Atom