[CLOUDSTACK-9079] ipsec service is not running after restarting virtual router

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Not A Problem
• Affects Version/s: 4.6.0
• Component/s: SystemVM, Virtual Router
• Security Level: Public (Anyone can view this level - this is the default.)
• Labels: systemvm virtualrouter vpn
• Environment: ACS 4.5.1 upgraded to 4.6.0
• Assignee: Rohit Yadav
• Reporter: Erik Weber
• Created: 23/Nov/15 10:44
• Updated: 17/Dec/17 20:39
• Resolved: 17/Dec/17 20:39

Description

after upgrading to 4.6.0 the ipsec service does no longer automatically start and as an effect vpn does not work.

manually starting the ipsec service, or doing any vpn related configuration (adding/deleting users) remedies the problem.

Steps to reproduce:
1) Install ACS 4.6.0
2) Configure a VPC (I haven't tested with normal isolated networks)
3) Enable remote access VPN, configure a user
4) Confirm that VPN works
5) Restart the VR
6) Confirm that VPN does NOT work, either by trying to connect or by issuing 'service ipsec status' on the VR