Question

Hi

There seems to be an IPSec issue on a RUTX08 with latestet firmware 07.01.2 whereas additional networks for a security association are not parsed correctly if an underscore is used in the tunnel name.  This results in a syntax error at IPsec startup, therefore the tunnels get never established. The additional network has been added through the web interface. Underscores in tunnel names have never been an issue up to now.

Below configuration snippets of ipsec.conf

first network:

conn FW_AB_49-FW_AB_49_c
  left=%any
  .... all the other ipsec parameters
  ....

second network:

conn FW-FW_AB_49_c_1
  also=FW-FW_AB_49_c (should be FW_AB_49-FW_AB_49_c)
  leftsubnet=xyz/29
  rightsubnet=xyz/24

Best regards,
Martin

Answer 1

Hello,

I want to check in more details. Please generate a troubleshoot file and send it to me via private message. Go to System -> Administration -> Troubleshoot and click Download.

Answer 2

until it's fixed just remove any underscores from your tunnel name and it will work.