Project

General

Profile

Actions
Copy link

Feature #3328

closed
JP RB

Allow reordering of IPsec Phase 1 and Phase 2 entries

Feature #3328: Allow reordering of IPsec Phase 1 and Phase 2 entries

Added by Jim Pingle almost 13 years ago. Updated almost 12 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Renato Botelho
Category:
IPsec
Target version:
2.2
Start date:
11/19/2013
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:

Description

Currently the IPsec entries are stuck in the order they were created, which can be problematic if you need to ensure a specific order of potentially overlapping networks or exceptions.

If you have two tunnels, one for 10.0.0.0/8 and another for 10.10.10.0/24, if the second was created after the first, then it could never work. If it was created first, then it would be respected first -- however of course that subnet's traffic would never be reachable over the second tunnel, but there are still some valid use cases for this were customers have to connect to networks dictated by other vendors and partners.

JT Updated by Jim Thompson about 12 years ago Actions
Copy link
 #1

  • Assignee set to Ermal Luçi

RB Updated by Renato Botelho about 12 years ago Actions
Copy link
 #2

  • Assignee changed from Ermal Luçi to Renato Botelho

I'm working on this

RB Updated by Renato Botelho about 12 years ago Actions
Copy link
 #3

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

CB Updated by Chris Buechler almost 12 years ago Actions
Copy link
 #4

  • Status changed from Feedback to Resolved

works

Actions
Copy link

Also available in: Atom