Project

General

Profile

Actions
Copy link

Bug #2394

closed

IPsec keepalive doesn't work with 0.0.0.0/0 local subnet

Added by Chris Buechler over 12 years ago. Updated over 11 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
IPsec
Target version:
2.1
Start date:
04/23/2012
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:

Description

When you have a keepalive IP defined in a phase 2 that uses 0.0.0.0/0 (everything) as the local network, the logic that populates /var/db/ipsecpinghosts fails and it doesn't add anything to that file, so it doesn't send those pings. Probably should just pick the LAN IP in that case, or really it can pick any IP, since anything matches in that instance.

Actions
Copy link

Also available in: Atom PDF