Enabling or disabling disable-route-autoinstall does not take effect while the IPSec daemon is not restarted
The command set vpn ipsec option disable-route-autoinstall prevents installing routes in the routing table 220 based on IPSec policies.
But after applying this command, the existing routes in table 220 are not cleared. Also, the new connections and new peer configurations continue adding routes into the routing table 220.
Only restarting IPSec (strongswan) daemon fixes this situation.
I tried to use swanctl --reload-settings and terminate sessions, but it did not help
There can be 2 ways to resolve this issue.
- Find the solution to fix it
- Add a Warning message that there is a need to restart ipsec.