SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0002947: Creating an IPSEC tunnel with IPSEC enabled breaks the green interface - MantisBT

Endian Issue Tracker

Please see now our new Bugtracker system: JIRA

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0002947

Endian Firewall

Network related (VPN, uplinks)

public

2010-05-29 22:26

2010-06-07 08:47

Reporter

danodemano

Assigned To

Priority

normal

Severity

minor

Reproducibility

always

Status

feedback

Resolution

open

Platform

OS Version

Product Version

2.4

Target Version

Fixed in Version

Summary

0002947: Creating an IPSEC tunnel with IPSEC enabled breaks the green interface

Description

Whenever I try to create a tunnel for IPSEC with it already enabled, or enable it with a tunnel defined, the green interface breaks and I can no longer ping it from the machines within my network. This also means that machines on the green interface can no longer access the internet. The VPN tunnel does come up and is shown as up on both sides.

Steps to reproduce:
Enable IPSEC
Create a net-to-net tunnel
Click "save" on the first screen after entering the information of the tunnel
Green interface is no longer pingable

Tags

No tags attached.

Attached Files

Relationships

Notes
(0004330) danodemano (reporter) 2010-06-01 13:25	Also restoring a backup with an IPSEC tunnel configured enabled and IPSEC enabled will break the green interface and it will stop talking with all the machines in the LAN.

(0004376) peter-endian (administrator) 2010-06-07 08:47	can you send us your ipsec configuration? this may probably happen if you manage it somehow to have the same subnet like the local green subnet also on the remote side

Issue History
Date Modified	Username	Field	Change
2010-05-29 22:26	danodemano	New Issue
2010-06-01 13:25	danodemano	Note Added: 0004330
2010-06-07 08:47	peter-endian	Note Added: 0004376
2010-06-07 08:47	peter-endian	Status	new => feedback