Quantcast
Channel: All EdgeRouter posts
Viewing all articles
Browse latest Browse all 60861

Re: Bug ERL: keep losing VPN config

$
0
0

If I config IPv6 again it errors:

 

yeri@sg-erl# set interfaces ethernet eth0 dhcpv6-pd pd 0 prefix-length /64 
[edit]
yeri@sg-erl# set interfaces ethernet eth0 dhcpv6-pd no-dns 
[edit]
yeri@sg-erl# set interfaces ethernet eth0 dhcpv6-pd pd 0 interface eth1 host-address ::1
[edit]
yeri@sg-erl# set interfaces ethernet eth0 dhcpv6-pd pd 0 interface eth1 no-dns
[edit]
yeri@sg-erl# set interfaces ethernet eth0 dhcpv6-pd pd 0 interface eth1 prefix-id :0
[edit]
yeri@sg-erl# set interfaces ethernet eth0 dhcpv6-pd pd 0 interface eth1 service slaac
[edit]
yeri@sg-erl# commit
[ vpn ]
[ vpn ipsec site-to-site peer be.yeri.be local-address ]
VPN configuration error: No local-address specified for peer "be.yeri.be"

Which makes sense I guess.

 

Now back to VPN:

 

yeri@sg-erl# set vpn ipsec site-to-site peer be.yeri.be local-address sg.yeri.be
[edit]
yeri@sg-erl# commit
[ vpn ]
conntrack v0.9.14 (conntrack-tools): connection tracking table has been emptied.

[edit]
yeri@sg-erl# save
Saving configuration to '/config/config.boot'...

So basically if I don't have IPv6 local-address sg.yeri.be doesn't work.

 

sg.yeri.be does not have AAAA records -- only A records. 

 

To why the config disappears at boot time:

 

It probably fails because it's loading the config before IPv6 is up and running at boot, and once I load it manually at a later stage IPv6 is actually working and thus it doesn't fail. 

 

So the issues seems to be with IPv4 and sg.yeri.be ?!


Viewing all articles
Browse latest Browse all 60861

Trending Articles