Page MenuHomeVyOS Platform

show vpn ike sa peer always shows all SAs
Closed, ResolvedPublicBUG

Description

At the moment, my router has three active IPsec-tunnels. The three corresponding SAs can be showed by show vpn ike sa. That works fine.

But it is not possible to show only one selected peer:

manuel@mvr02:~$ show vpn ike sa peer 193.122.xx.xx
Peer ID / IP                            Local ID / IP
------------                            -------------
193.122.xx.xx 193.122.xx.xx             87.106.xxx.xxx 87.106.xxx.xxx          

    State  IKEVer  Encrypt      Hash          D-H Group      NAT-T  A-Time  L-Time
    -----  ------  -------      ----          ---------      -----  ------  ------
    up     IKEv2   AES_CBC_256  HMAC_SHA2_384_192 MODP_1536      no     526     25730  

Peer ID / IP                            Local ID / IP
------------                            -------------
109.250.168.xxx fw1int                  87.106.xxx.xxx mvr02                   

    State  IKEVer  Encrypt      Hash          D-H Group      NAT-T  A-Time  L-Time
    -----  ------  -------      ----          ---------      -----  ------  ------
    up     IKEv2   AES_CBC_256  HMAC_SHA2_256_128 MODP_2048      no     7311    21321  

Peer ID / IP                            Local ID / IP
------------                            -------------
93.90.203.xx 93.90.203.xx               87.106.xxx.xxx 87.106.xxx.xxx          

    State  IKEVer  Encrypt      Hash          D-H Group      NAT-T  A-Time  L-Time
    -----  ------  -------      ----          ---------      -----  ------  ------
    up     IKEv2   AES_CBC_256  HMAC_SHA2_384_192 MODP_1536      no     20404   5714   

manuel@mvr02:~$

I've tried some different variants as peer (ipv4-address, name of peer in vyos-config, peer-id as used in IKE), but always all peers are shown.

Details

Difficulty level
Easy (less than an hour)
Version
1.5-rolling-202408270022
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Unspecified (possibly destroys the router)
Issue type
Bug (incorrect behavior)