← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1436263] [NEW] [IPv6] [VPNaaS]Add connaddrfamily to ipsec.conf.template

 

Public bug reported:

To set up an IPv6 based tunnel between two security gateways, connaddrfamily=ipv6 should be set in ipsec.conf.
Without this, whack will refuse to recognize the given IP addresses as IPv6 address.

So 'connaddrfamily' config parameter should be added to
template/openswan/ipsec.conf.template. This parameter will take either
'ipv4' or 'ipv6' as values. And ipsec device driver should set
connaddrfamily to either ipv4 or ipv6 based on the addresses used for
the connection.

Also need the same change for template/strongswan/ipsec.conf.template

** Affects: neutron
     Importance: Undecided
     Assignee: venkata anil (anil-venkata)
         Status: New

** Changed in: neutron
     Assignee: (unassigned) => venkata anil (anil-venkata)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1436263

Title:
   [IPv6] [VPNaaS]Add connaddrfamily to ipsec.conf.template

Status in OpenStack Neutron (virtual network service):
  New

Bug description:
  To set up an IPv6 based tunnel between two security gateways, connaddrfamily=ipv6 should be set in ipsec.conf.
  Without this, whack will refuse to recognize the given IP addresses as IPv6 address.

  So 'connaddrfamily' config parameter should be added to
  template/openswan/ipsec.conf.template. This parameter will take either
  'ipv4' or 'ipv6' as values. And ipsec device driver should set
  connaddrfamily to either ipv4 or ipv6 based on the addresses used for
  the connection.

  Also need the same change for template/strongswan/ipsec.conf.template

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1436263/+subscriptions


Follow ups

References