Actions
Bug #4254
closedDynamic interface removal/addition breaks IKEv2
Start date:
01/20/2015
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.2
Affected Architecture:
Description
Where you have a dynamic interface removed and re-added while running IKEv2 in strongswan, things break. Good easily replicable example is an OpenVPN server instance bound to the same WAN as IPsec. Restart OpenVPN, and strongswan will kick out:
15[IKE] old path is not available anymore, try to find another 15[IKE] sending address list update using MOBIKE
at which time it tries connecting to every IP sent via MOBIKE, and gets itself into a mess (VPN no longer works) until you X out the connection under Status>IPsec.
Actions