topic Re: IPSec instability with IKEv2 in Spark Firewall (SMB)

IPSec instability with IKEv2

Rafal_N — Fri, 02 Aug 2019 10:14:33 GMT

Hello,

There is sk (112160) about instability ikev2 prior R80.10. How to read it in context SMB appliances where firmware is in version R77.20.xx

Do we suppose to build ike v2 tunnels on 1400 appliances or it is not recommended??

Rafal

Re: IPSec instability with IKEv2

Pedro_Espindola — Fri, 02 Aug 2019 14:09:41 GMT

According to sk112160, this is a R77.30 issue.

Even if it affects R77.20, it doesn't mean it will affect Gaia Embedded versions, since they have their own branch of development.

Version R77.20.87 should work fine. Plus, the problem is caused by a specific situation: "IKEv2 Auth exchange fails if more than one certificate is provided by initiator."

Are you having issues with IKEv2?

IPSec instability with IKEv2

G_W_Albrecht — Mon, 05 Aug 2019 11:58:43 GMT

I would not suggest that sk112160 is valid for GAiA Embedded at all, as well as that this is no instability nor a real issue - if IKEv2 Auth exchange fails if more than one certificate is provided by initiator, the initiator should just provide one cert instead 😀.