Project

General

Profile

Actions

Bug #2300

closed

Static routes for IPsec peers missing when attached to IP Alias VIP

Added by Jim Pingle about 12 years ago. Updated almost 11 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
IPsec
Target version:
Start date:
03/19/2012
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
Affected Architecture:

Description

The "static route needed?" check in vpn.inc for IPsec peers only checks CARP VIPs to see if a static route is needed, and not IP Alias VIPs. So if you attach a tunnel to an IP Alias VIP on an alternate (non-default) WAN, it does not get a static route, and thus doesn't work properly.

Actions

Also available in: Atom PDF