IPsecVPN prefixes not appear on routing table 'kernel'

Bugs
, ,
1

Hi all,

Few days ago I’m upgraded Vyos 1.1.8 to Vyos 1.2.
Everything is working, VPN, BGP, OSPF connectivity is up and running.
However I just realized that the VPN’s IP prefixes are not show in routing table (I can ping those prefix ip).
Is it a bug on version 1.2?

VyosRouter1.2:~$ sh ip route kernel
VyosRouter1.2:~$

2

Hi, can you try run command sudo ip route show table 220
Is routes there?

3

Hi Dmitry,

Yes, I can see the kernel routes on table 220.

VyosRouter1.2:~$ sh ip ro table 220
Codes: K - kernel route, C - connected, S - static, R - RIP,
O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
T - Table, v - VNC, V - VNC-Direct, A - Babel, D - SHARP,
F - PBR, f - OpenFabric,
> - selected route, * - FIB route, q - queued route, r - rejected route

VRF default table 220:
K>* 10.X.X.0/15 [0/0] via 149.X.X.X, eth0, 05:04:29
K>* 192.X.X.X/32 [0/0] via 149.X.X.X, eth0, 05:05:37

Is it normal to have this routes on table 220 instead of main table (like version 1.1.8)?

4

Yes, it is normal behaviour. It use strongswan by default Introduction to strongSwan :: strongSwan Documentation

5

Hi Dmitry,

Thanks for the feedback. Really appreciate it.
One more questions:
Is it better to leave the kernel routing in table 220 or move it to main table?

6

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.