Project

General

Profile

Actions

Bug #8540

closed

Disable Rekey Checkbox Should be Disabled on New IPsec Tunnels

Added by Chris Linstruth over 6 years ago. Updated about 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
IPsec
Target version:
Start date:
05/28/2018
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.4.3_1
Affected Architecture:
All

Description

When a new IPsec Phase 1 tunnel is created the Disable Rekey checkbox is checked by default.

I would argue that the default there should be unchecked as checked/disabled is almost never what one would want.

Users use the defaults not knowing any differently.

This has been shown to break IPsec to AWS VPC and Cisco ASAs.

Actions

Also available in: Atom PDF