OpenSolaris

Printable Version Enter a New Search
Bug ID 6326834
Synopsis ipsecconf -l displays IPV4 outbound policies with no remote address twice
State 10-Fix Delivered (Fix available in build)
Category:Subcategory network:ipsec
Keywords onnv_triage
Responsible Engineer Paul M Roberts
Reported Against
Duplicate Of
Introduced In solaris_nevada
Commit to Fix snv_26
Fixed In snv_26
Release Fixed solaris_nevada(snv_26) , solaris_10u4(s10u4_01) (Bug ID:2144121)
Related Bugs 6227733
Submit Date 21-September-2005
Last Update Date 1-November-2005
Description
All active policies which meet the following criteria:

  * Contain an IPV4 address (implicit or explicit)
  * Contain no remote address
  * Apply in the outbound direction

will be displayed twice when 'ipsecconf -l' is used.

For example:

# cat polladdr_1.txt
{ laddr 1.1.1.2 dir out } bypass { }
# ipsecconf -f
# ipsecconf -a polladdr_1.txt
        WARNING : New policy entries that are being added may
        affect the existing connections. Existing connections
        that are not subjected to policy constraints, may be
        subjected to policy constraints because of the new
        policy. This can disrupt the communication of the
        existing connections.
# ipsecconf -l
#INDEX 5
{ laddr 1.1.1.2/32 dir out } pass { } 
#INDEX 5
{ laddr 1.1.1.2/32 dir out } pass { }
Work Around
N/A
Comments
N/A