Project

General

Profile

Bug #8540

Disable Rekey Checkbox Should be Disabled on New IPsec Tunnels

Added by Chris Linstruth almost 3 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
IPsec
Target version:
2.4.4
Start date:
05/28/2018
Due date:
% Done:

100%

Estimated time:
Affected Version:
2.4.3_1
Affected Architecture:
All
Release Notes:
Default

Description

When a new IPsec Phase 1 tunnel is created the Disable Rekey checkbox is checked by default.

I would argue that the default there should be unchecked as checked/disabled is almost never what one would want.

Users use the defaults not knowing any differently.

This has been shown to break IPsec to AWS VPC and Cisco ASAs.

Associated revisions

Revision 5f04221b (diff)
Added by Jim Pingle almost 3 years ago

Do not disable rekeying by default on IPsec P1 entries. Fixes #8540

Revision a342020d (diff)
Added by Jim Pingle almost 3 years ago

Do not disable rekeying by default on IPsec P1 entries. Fixes #8540

History

#1 Updated by Jim Pingle almost 3 years ago

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

#2 Updated by Jim Pingle over 2 years ago

  • Status changed from Feedback to Resolved

#3 Updated by Jim Pingle over 2 years ago

  • Target version set to 2.4.4

Also available in: Atom PDF