Project

General

Profile

Actions

Bug #4254

closed

Dynamic interface removal/addition breaks IKEv2

Added by Chris Buechler over 9 years ago. Updated over 9 years ago.

Status:
Resolved
Priority:
Very High
Assignee:
Ermal Luçi
Category:
IPsec
Target version:
Start date:
01/20/2015
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.2
Affected Architecture:

Description

Where you have a dynamic interface removed and re-added while running IKEv2 in strongswan, things break. Good easily replicable example is an OpenVPN server instance bound to the same WAN as IPsec. Restart OpenVPN, and strongswan will kick out:

 15[IKE] old path is not available anymore, try to find another
 15[IKE] sending address list update using MOBIKE

at which time it tries connecting to every IP sent via MOBIKE, and gets itself into a mess (VPN no longer works) until you X out the connection under Status>IPsec.

Actions

Also available in: Atom PDF