Page MenuHomeVyOS Platform

IPSec: OP cmd : "show vpn ike sa" does not show output
Closed, ResolvedPublicBUG

Description

In the latest rolling version "show vpn ike sa" shows as "IPsec Process NOT Running" even though the process is running:

vyos@vyos# run sh vpn ike sa
IPsec Process NOT Running
[edit]
vyos@vyos# run sh vpn ike sa peer test
IPsec Process NOT Running

vyos@vyos# sudo swanctl -l
test: #2, ESTABLISHED, IKEv1, 23608727f5bca3cf_i* e11bbfea0e653891_r
  local  '10.0.0.2' @ 10.0.0.2[500]
  remote '10.0.0.1' @ 10.0.0.1[500]
  AES_CBC-128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
  established 21s ago, rekeying in 78509s
  test-vti: #4, reqid 1, INSTALLED, TUNNEL, ESP:AES_CBC-128/HMAC_SHA1_96/MODP_14
    installed 21s ago, rekeying in 2979s, expires in 3579s
    in  c4a7c633 (-|0x00000001),      0 bytes,     0 packets
    out c59fb259 (-|0x00000001),      0 bytes,     0 packets
    local  0.0.0.0/0
    remote 0.0.0.0/0

vyos@vyos# run sh vpn ike status
● strongswan.service - strongSwan IPsec IKEv1/IKEv2 daemon using swanctl
     Loaded: loaded (/lib/systemd/system/strongswan.service; disabled; preset: )
     Active: active (running) since Thu 2023-07-13 08:02:48 UTC; 12min ago
    Process: 2739 ExecReload=/usr/sbin/swanctl --reload (code=exited, status=0/)
    Process: 2744 ExecReload=/usr/sbin/swanctl --load-all --noprompt (code=exit)
   Main PID: 1903 (charon-systemd)
     Status: "charon-systemd running, strongSwan 5.9.8, Linux 6.1.38-amd64-vyos"
      Tasks: 17 (limit: 1137)
     Memory: 16.9M
        CPU: 3.136s
     CGroup: /system.slice/strongswan.service
             └─1903 /usr/sbin/charon-systemd

Jul 13 08:14:47 vyos charon-systemd[1903]: generating INFORMATIONAL_V1 request ]
Jul 13 08:14:47 vyos charon-systemd[1903]: sending packet: from 10.0.0.2[500] t)
Jul 13 08:15:17 vyos charon[1903]: 16[NET] <test|2> received packet: from 10.0.)

vyos@vyos# run sh vpn ipsec status
IPsec Process Running: 1903

vyos@vyos# run sh vpn ipsec sa
Connection    State    Uptime    Bytes In/Out    Packets In/Out    Remote addrel
------------  -------  --------  --------------  ----------------  -------------
test-vti      up       4m59s     0B/0B           0/0               10.0.0.1    4

Details

Difficulty level
Unknown (require assessment)
Version
1.4-rolling-202307120317
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Unspecified (please specify)