GutoVeronezi commented on issue #6903:
URL: https://github.com/apache/cloudstack/issues/6903#issuecomment-1318735905
@harikrishna-patnala
PR #5375, introduced in version 4.15.2.0, removed parameter `%any` of VPNs
client-to-site (C2S) IPSec secrets:
- previous structure:
`<IP> %any : PSK "<PSK>"`
- structure after the change:
`<IP> : PSK "<PSK>"`
Because of that, when a VPN site-so-site (S2S) is created in parallel to a
VPN C2S in the same network, the C2S will not handle any IP (`%any`) anymore
and, as the network is being tunneled to the other VPN, the connection will be
handled by the final peer. This way, when a VPN S2S is created in parallel to a
VPN C2S in the same network, it is only possible to connect to the C2S with the
S2S PSK.
I created PR #6907 to handle this situation, could you take a look at it?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
