[GitHub] [cloudstack] GutoVeronezi commented on issue #6903: Remote VPN is not working if site-to-site VPN exists

[GitBox <gi...@apache.org>]

GutoVeronezi commented on issue #6903:
URL: https://github.com/apache/cloudstack/issues/6903#issuecomment-1318735905

   @harikrishna-patnala 
   
   PR #5375, introduced in version 4.15.2.0, removed parameter `%any` of VPNs client-to-site (C2S) IPSec secrets:
   - previous structure:
     `<IP> %any : PSK "<PSK>"`
   - structure after the change:
     `<IP> : PSK "<PSK>"`
   
   Because of that, when a VPN site-so-site (S2S) is created in parallel to a VPN C2S in the same network, the C2S will not handle any IP (`%any`) anymore and, as the network is being tunneled to the other VPN, the connection will be handled by the final peer. This way, when a VPN S2S is created in parallel to a VPN C2S in the same network, it is only possible to connect to the C2S with the S2S PSK.
   
   I created PR #6907 to handle this situation, could you take a look at it?
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org