IPSEC op-commands do not work
Any IPSEC configuration:
In my case IPSEC in DMVPN
set vpn ipsec esp-group ESP-HUB lifetime '1800' set vpn ipsec esp-group ESP-HUB mode 'transport' set vpn ipsec esp-group ESP-HUB pfs 'disable' set vpn ipsec esp-group ESP-HUB proposal 1 encryption 'aes256' set vpn ipsec esp-group ESP-HUB proposal 1 hash 'sha1' set vpn ipsec ike-group IKE-HUB close-action 'trap' set vpn ipsec ike-group IKE-HUB key-exchange 'ikev1' set vpn ipsec ike-group IKE-HUB lifetime '3600' set vpn ipsec ike-group IKE-HUB proposal 1 dh-group '2' set vpn ipsec ike-group IKE-HUB proposal 1 encryption 'aes256' set vpn ipsec ike-group IKE-HUB proposal 1 hash 'sha1' set vpn ipsec interface 'eth0' set vpn ipsec profile NHRPVPN authentication mode 'pre-shared-secret' set vpn ipsec profile NHRPVPN authentication pre-shared-secret 'secret' set vpn ipsec profile NHRPVPN bind tunnel 'tun100' set vpn ipsec profile NHRPVPN esp-group 'ESP-HUB' set vpn ipsec profile NHRPVPN ike-group 'IKE-HUB'
vyos@vyos:~$ show vpn ipsec sa Traceback (most recent call last): File "/usr/libexec/vyos/op_mode/ipsec.py", line 1027, in <module> res = vyos.opmode.run(sys.modules[__name__]) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3/dist-packages/vyos/opmode.py", line 271, in run res = func(**args) ^^^^^^^^^^^^ File "/usr/libexec/vyos/op_mode/ipsec.py", line 734, in show_sa sa_data = _get_raw_data_sas() ^^^^^^^^^^^^^^^^^^^ File "/usr/libexec/vyos/op_mode/ipsec.py", line 44, in _get_raw_data_sas get_sas = vyos.ipsec.get_vici_sas() ^^^^^^^^^^^^^^^^^^^^^^^^^ File "/usr/lib/python3/dist-packages/vyos/ipsec.py", line 36, in get_vici_sas from vici import Session as vici_session ModuleNotFoundError: No module named 'vici'