Bug #2857
VPN: left subnet equals to right subnet in IPsec configuration
Status: | CLOSED | Start date: | ||
---|---|---|---|---|
Priority: | Normal | Due date: | ||
Assignee: | - | % Done: | 100% | |
Category: | nethserver-ipsec | |||
Target version: | ~FUTURE | |||
Security class: | Resolution: | REJECTED | ||
Affected version: | NEEDINFO: | Yes |
Description
Actually NethServer don't support site to site IPsec VPNs, but if somebody create an account specifying a remote network this network is added in the ipsec.conf as left and right subnet.
Probably that configuration doesn't have to be added to ipsec.conf until nethserver will start support site to site IPsec vpn, after that the left and right subnets have to be different, of course.
Related issues
History
#1 Updated by Filippo Carletti almost 7 years ago
- Target version set to v6.5
#2 Updated by Giacomo Sanchietti almost 7 years ago
- Category set to nethserver-ipsec
- Status changed from NEW to TRIAGED
- % Done changed from 0 to 20
#3 Updated by Giacomo Sanchietti almost 7 years ago
- NEEDINFO changed from No to Yes
Is this behavior causing any error? Or is it just cosmetic?
#4 Updated by Davide Marini almost 7 years ago
In a host to net configuration probably it doesn't cause problems, but probably is not the correct configuration.
In a "site to site" configuration (still not supported by web interface) this behavior should be a bug because remote and local network (left and right subnets) have to be different.
Trying to make an IPsec manually (e.g. from console) would be more difficult.
In any case it doesn't seem to be a correct configuration.
#5 Updated by Giacomo Sanchietti almost 7 years ago
- Target version changed from v6.5 to ~FUTURE
#6 Updated by Giacomo Sanchietti about 6 years ago
- Status changed from TRIAGED to CLOSED
- % Done changed from 20 to 100
- Resolution set to REJECTED
New implementation isn't affected by this issue. See #3194
#7 Updated by Giacomo Sanchietti about 6 years ago
- Related to Feature #3194: IPsec tunnels (net2net) web interface added