Here is an example of a perferctly valid vyos vpn config that will never recover a child SA when resetting it.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Fri, Apr 12
Fri, Apr 12
haakon.nore added a comment to T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down.
haakon.nore added a comment to T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down.
In 1.4 and 1.5 command reset vpn ipsec has a termination meaning.
No, it says reset, both the command, and auto complete output. It does not say terminate or clear. If you run a reset you do expect it to restart or re-populate in one way or another, not just stop working completley.
Fri, Mar 29
Fri, Mar 29
haakon.nore added a comment to T6148: Reset vpn ipsec command breaks tunnel and does not reset SAs that are down.
Not sure if it is meaningful to create a new operational vyos command "initiate" or re-write the reset to be consistent with older VyOS.
Wed, Mar 20
Wed, Mar 20
Nov 3 2021
Nov 3 2021
haakon.nore awarded T3294: Images for Dell VEP platform use no default baud rate for this platform a Like token.
Feb 19 2021
Feb 19 2021
haakon.nore added a comment to T3341: Wrong behavior of the "reset vpn ipsec-peer XXX tunnel XXX" command.
I can confirm it is broken for
reset vpn ipsec-peer XXX
too when you run policy-based VPNs.
Peer reset log: