Project

General

Profile

Actions

Regression #14713

closed
JP JP

Mobile IPsec not allocating address to connecting clients on dev snapshots

Regression #14713: Mobile IPsec not allocating address to connecting clients on dev snapshots

Added by Jim Pingle about 3 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority:
Very High
Assignee:
Category:
IPsec
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
23.09
Release Notes:
Force Exclusion
Affected Version:
Affected Architecture:

Description

This regressed since the previous release at some point. Mobile client attempts to connect but is unable to obtain an address and the connection fails. Affects at least IKEv2 EAP-MSCHAPv2 and EAP-RADIUS but likely others as well.

Logs are similar to the following:

Aug 25 08:41:12     charon     46814     13[IKE] <con-mobile|10> peer requested virtual IP %any
Aug 25 08:41:12     charon     46814     13[IKE] <con-mobile|10> no virtual IP found for %any requested by 'jimp'
Aug 25 08:41:12     charon     46814     13[IKE] <con-mobile|10> peer requested virtual IP %any6
Aug 25 08:41:12     charon     46814     13[IKE] <con-mobile|10> no virtual IP found for %any6 requested by 'jimp'
Aug 25 08:41:12     charon     46814     13[IKE] <con-mobile|10> no virtual IP found, sending INTERNAL_ADDRESS_FAILURE 

JP Updated by Jim Pingle about 3 years ago Actions #1

This regressed in a recent rector refactoring ( commit:264198a5a69c0ea45726ccb4c0682f1f0cd5e8a9 ), some references to $a_client in ipsec.inc were updated but others were not. I manually updated the rest and now I can connect again. Commit coming shortly.

JP Updated by Jim Pingle about 3 years ago Actions #2

  • Status changed from In Progress to Feedback
  • % Done changed from 0 to 100

Applied in changeset commit:ceea1bd07b25ecb3061f3eda1a5137d2ead8311d.

VS Updated by Vladimir Suhhanov about 3 years ago Actions #3

Fixed for me. Thanks.

JP Updated by Jim Pingle about 3 years ago Actions #4

  • Status changed from Feedback to Resolved

JP Updated by Jim Pingle almost 3 years ago Actions #5

  • Target version changed from 2.8.0 to 2.7.1
Actions

Also available in: Atom