Project

General

Profile

Actions
Copy link

Bug #11792

closed

Cannot disable IPsec P1 when related P2s are in VTI mode and enabled

Added by Marcos M over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Viktor Gurov
Category:
IPsec
Target version:
2.5.2
Start date:
04/08/2021
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
21.05
Release Notes:
Default
Affected Version:
Affected Architecture:

Description

Setup:
IPsec Phase 1 with one or more Phase 2 entries in VTI mode. No IPsec interfaces assigned.

Issue:
While both P1 and P2 are enabled, try disabling the P1. The following error is shown:

Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P2.

Expected:
  1. When clicking disable on P1, the P1 along with all its P2s should be disabled to match the behavior of non-vti P2s - as long as related IPsec interfaces are assigned.
  2. The error description should say:
    Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P1.

This is related to #10190

Related issues

Related to Bug #12198: Disabling an IPsec phase 1 entry does not disable related phase 2 entriesResolvedViktor Gurov

Actions
Actions
Copy link
 #2

Updated by Jim Pingle over 3 years ago

  • Status changed from New to Pull Request Review
  • Target version changed from CE-Next to 2.6.0
Actions
Copy link
 #3

Updated by Viktor Gurov over 3 years ago

  • Status changed from Pull Request Review to Feedback
  • % Done changed from 0 to 100
Actions
Copy link
 #4

Updated by Jim Pingle over 3 years ago

  • Plus Target Version set to 21.05
Actions
Copy link
 #5

Updated by Jim Pingle over 3 years ago

Already in 21.05 branch.

Actions
Copy link
 #6

Updated by Marcos M over 3 years ago

Tested latest snapshot. Worked well.

Actions
Copy link
 #7

Updated by Jim Pingle over 3 years ago

Marcos Mendoza wrote:

Tested latest snapshot. Worked well.

2.6.0 snapshot or 21.05 snapshot?

Actions
Copy link
 #8

Updated by Marcos M over 3 years ago

Tested on both 21.05 and 2.6.0 snapshots.

Actions
Copy link
 #9

Updated by Jim Pingle over 3 years ago

  • Status changed from Feedback to Closed
Actions
Copy link
 #10

Updated by Jim Pingle over 3 years ago

  • Target version changed from 2.6.0 to 2.5.2
Actions
Copy link
 #11

Updated by Renato Botelho over 3 years ago

  • Assignee set to Viktor Gurov
Actions
Copy link
 #12

Updated by Viktor Gurov over 3 years ago

  • Related to Bug #12198: Disabling an IPsec phase 1 entry does not disable related phase 2 entries added
Actions
Copy link

Also available in: Atom PDF