iked2 code in vpp is PoC quality, so bugs are to be expected. Feel free to submit a patch to fix the issue.
You could also try strongswan solution using this plugin https://github.com/matfabia/strongswan/tree/vpp/src/libcharon/plugins/kernel_vpp Regards, Klement Quoting wangchuan...@163.com (2018-12-03 11:20:18) > #set int state TenGigabitEthernet6/0/0 up > #set int ip addr TenGigabitEthernet6/0/0 192.168.6.33/24 > > #ikev2 profile add pr1 > #ikev2 profile set pr1 auth shared-key-mic string 123456 > #ikev2 profile set pr1 id local fqdn hctel.hubcpe > #ikev2 profile set pr1 id remote fqdn hctel.cpe > #ikev2 profile set pr1 traffic-selector local ip-range 0.0.0.0 - > 255.255.255.255 port-range 0 - 65535 protocol 0 > #ikev2 profile set pr1 traffic-selector remote ip-range 192.168.122.0 - > 192.168.122.255 port-range 0 - 65535 protocol 0 > ..... after sometime , ikev2 negotiate successfully ...... > ..... ipsec0 appears > ...... > then: > #ikev2 profile del pr1 > but ipsec0 still exists > > -------------------------------------------------------------------------- > > wangchuan...@163.com > > > From: [1]Klement Sekera > Date: 2018-12-03 18:06 > To: [2]wangchuan...@163.com; [3]vpp-dev > Subject: Re: [vpp-dev] how can i del the ipsec Node that generated by > ikev2? > Can you please post the CLI commands which result in such state? > > Thanks, > Klement > > Quoting wangchuan...@163.com (2018-12-03 04:12:55) > > hi all, > > The ipsec Node generated by Ikev2 still existing after deleting > the > > ikev2 profile, how can I delete it? > > Thanks! > > > > > > -------------------------------------------------------------------------- > > > > wangchuan...@163.com > > References > > Visible links > 1. mailto:ksek...@cisco.com > 2. mailto:wangchuan...@163.com > 3. mailto:vpp-dev@lists.fd.io
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11486): https://lists.fd.io/g/vpp-dev/message/11486 Mute This Topic: https://lists.fd.io/mt/28567959/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-