VPNaaS: IPsec siteconnection status DOWN while using IKE v2
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
neutron |
Fix Released
|
Medium
|
Dongcan Ye |
Bug Description
While using IKE policy with version v2, the IPsec siteconnection status always down, but the network traffic is OK.
From the ipsec status we can see that the ipsec connection is established:
# ip netns exec snat-a4d93552-
000 Total IPsec connections: loaded 3, active 1
000
000 State Information: DDoS cookies not required, Accepting new IKE connections
000 IKE SAs: total(1), half-open(0), open(0), authenticated(1), anonymous(0)
000 IPsec SAs: total(1), authenticated(1), anonymous(0)
000
000 #2: "b42f6ee6-
000 #2: "b42f6ee6-
000 #1: "b42f6ee6-
000 #1: "b42f6ee6-
000
000 Bare Shunt list:
000
I think we should match "PARENT SA" in IKE v2. [1]
Changed in neutron: | |
assignee: | nobody → Dongcan Ye (hellochosen) |
Fix proposed to branch: master /review. openstack. org/582113
Review: https:/