Project

General

Profile

Actions
Copy link

Bug #8239

closed
JP JP

If IPsec bypasslan is enabled while the LAN interface is disabled, all traffic bypasses IPsec

Bug #8239: If IPsec bypasslan is enabled while the LAN interface is disabled, all traffic bypasses IPsec

Added by Jim Pingle over 8 years ago. Updated over 8 years ago.

Status:
Resolved
Priority:
High
Assignee:
Jim Pingle
Category:
IPsec
Target version:
2.4.3
Start date:
12/27/2017
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.4.x
Affected Architecture:
All

Description

If IPsec bypasslan is enabled while the LAN interface is disabled, all traffic bypasses IPsec because it makes an SPD for 0.0.0.0/0 to 0.0.0.0/0 set to 'none', which effectively makes all traffic skip IPsec processing.

bypasslan should be skipped if LAN is disabled or if LAN does not have an IP address

JP Updated by Jim Pingle over 8 years ago Actions
Copy link
 #1

  • Status changed from New to Confirmed
  • Assignee set to Jim Pingle

JP Updated by Jim Pingle over 8 years ago Actions
Copy link
 #2

  • Status changed from Confirmed to Feedback
  • % Done changed from 0 to 100

Applied in changeset commit:fbdf0a084da239ca785360106b3dd8d1390223cf.

JP Updated by Jim Pingle over 8 years ago Actions
Copy link
 #3

  • Status changed from Feedback to Resolved

Works fine now. If the interface is disabled or otherwise has no address, then bypasslan is omitted.

Actions
Copy link

Also available in: Atom