Cannot disable IPsec P1 when related P2s are in VTI mode and enabled
Plus Target Version:
IPsec Phase 1 with one or more Phase 2 entries in VTI mode. No IPsec interfaces assigned.
While both P1 and P2 are enabled, try disabling the P1. The following error is shown:
Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P2.Expected:
- When clicking disable on P1, the P1 along with all its P2s should be disabled to match the behavior of non-vti P2s - as long as related IPsec interfaces are assigned.
- The error description should say:
Cannot disable a Phase 1 with a child Phase 2 while the interface is assigned. Remove the interface assignment before disabling this P1.
This is related to #10190
Updated by Viktor Gurov 6 months ago