You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by "kiranchavala (via GitHub)" <gi...@apache.org> on 2025/12/05 05:53:39 UTC
[I] VPN setting changes are not propagated to the Virtual Router [cloudstack]
kiranchavala opened a new issue, #12195:
URL: https://github.com/apache/cloudstack/issues/12195
### problem
VPN setting change is immediately applied on the router
### versions
ACS 4.22 and previous versions
### The steps to reproduce the bug
**Steps to reproduce the issue**
1. Create a vpc network
2. Create a vpn connection in the vpc
Execute the following API CALL on the public ipaddress which is (Source NAT )
Give the iprange prameter
```
(localcloud) 🐱 > create remoteaccessvpn publicipid=b37982a6-00db-4448-8313-663f9d96fabc iprange=172.33.1.2-172.33.1.9
{
"remoteaccessvpn": {
"account": "admin",
"domain": "ROOT",
"domainid": "d3ef52dc-bfad-11f0-8635-bc24116ce151",
"domainpath": "ROOT",
"fordisplay": true,
"id": "0cced683-e219-4947-8b0e-444c2ff17989",
"iprange": "172.33.1.3-172.33.1.9",
"presharedkey": "zq27dvDNaCupQ7hvgFCBg3t2",
"publicip": "192.168.55.52",
"publicipid": "b37982a6-00db-4448-8313-663f9d96fabc",
"state": "Running"
}
}
```
3. Now from a vpn client, connect to the VPN >> VPN connection is successfull and the client gets an ip in the range of 172.33.1.3-172.33.1.9
4. Delete the remoteaccessvpn
```
(localcloud) 🐱 > delete remoteaccessvpn publicipid=b37982a6-00db-4448-8313-663f9d96fabc
{
"success": true
}
```
5. Create again a vpn connetion in the vpc with a different ip range
```
(localcloud) 🐱 > create remoteaccessvpn publicipid=b37982a6-00db-4448-8313-663f9d96fabc iprange=10.3.1.1-10.3.1.9
{
"remoteaccessvpn": {
"account": "admin",
"domain": "ROOT",
"domainid": "d3ef52dc-bfad-11f0-8635-bc24116ce151",
"domainpath": "ROOT",
"fordisplay": true,
"id": "0cced684-e219-4947-8b0e-444c2ff17989",
"iprange": "10.3.1.1-10.3.1.9",
"presharedkey": "CBbYRAVx3K8Wa7c7FkBpKQvV",
"publicip": "192.168.55.52",
"publicipid": "b37982a6-00db-4448-8313-663f9d96fabc",
"state": "Running"
}
}
```
6. Now from a vpn client, connect to the VPN >> VPN connection is successfull and the client still gets an ip in the range of 172.33.1.3-172.33.1.9
**Workaround**
Either to restart the xl2tp service in the router
service xl2tpd restart
or
Restart the vpc with cleanup option
From the vpn client connect again, this time the correct ip from the range is assigned
### What to do about it?
**Expected behaviour**
CloudStack should automatically restart the service whenever there is a change in the vpn setting
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] VPN setting changes are not propagated to the Virtual Router [cloudstack]
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
kiranchavala commented on issue #12195:
URL: https://github.com/apache/cloudstack/issues/12195#issuecomment-3615720981
> this issue may occur with older versions, right ? [@kiranchavala](https://github.com/kiranchavala)
>
> I found several vpn issues before ([#10063](https://github.com/apache/cloudstack/issues/10063)). Almost all have been fixed, except one which may be related to this issue
>
> ```
> Remote access VPN configuration (l2tp.conf) is not removed in VR when VPN is disabled
> ```
You mean older versions of Cloudstack ?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] VPN setting changes are not propagated to the Virtual Router [cloudstack]
Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.
DaanHoogland closed issue #12195: VPN setting changes are not propagated to the Virtual Router
URL: https://github.com/apache/cloudstack/issues/12195
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] VPN setting changes are not propagated to the Virtual Router [cloudstack]
Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.
DaanHoogland commented on issue #12195:
URL: https://github.com/apache/cloudstack/issues/12195#issuecomment-3823460769
fixed in #12422
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] VPN setting changes are not propagated to the Virtual Router [cloudstack]
Posted by "weizhouapache (via GitHub)" <gi...@apache.org>.
weizhouapache commented on issue #12195:
URL: https://github.com/apache/cloudstack/issues/12195#issuecomment-3625464788
> [@weizhouapache](https://github.com/weizhouapache) the issue is also observed in the 4.20.1 release
thanks @kiranchavala
assigning to me. I will work on it in the bugfest
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] VPN setting changes are not propagated to the Virtual Router [cloudstack]
Posted by "kiranchavala (via GitHub)" <gi...@apache.org>.
kiranchavala commented on issue #12195:
URL: https://github.com/apache/cloudstack/issues/12195#issuecomment-3625343162
@weizhouapache the issue is also observed in the 4.20.1 release
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] VPN setting changes are not propagated to the Virtual Router [cloudstack]
Posted by "weizhouapache (via GitHub)" <gi...@apache.org>.
weizhouapache commented on issue #12195:
URL: https://github.com/apache/cloudstack/issues/12195#issuecomment-3615814771
>
> [@weizhouapache](https://github.com/weizhouapache) You mean older versions of Cloudstack ?
yes @kiranchavala
I made some changes on VPN implementation in ACS 4.22. just to confirm it is not caused by my changes 😄
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org