IPsecVPN prefixes not appear on routing table 'kernel'

Hi all,

Few days ago I’m upgraded Vyos 1.1.8 to Vyos 1.2.
Everything is working, VPN, BGP, OSPF connectivity is up and running.
However I just realized that the VPN’s IP prefixes are not show in routing table (I can ping those prefix ip).
Is it a bug on version 1.2?

VyosRouter1.2:~ sh ip route kernel VyosRouter1.2:~

Hi, can you try run command sudo ip route show table 220
Is routes there?

Hi Dmitry,

Yes, I can see the kernel routes on table 220.

VyosRouter1.2:~$ sh ip ro table 220
Codes: K - kernel route, C - connected, S - static, R - RIP,
O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
T - Table, v - VNC, V - VNC-Direct, A - Babel, D - SHARP,
F - PBR, f - OpenFabric,
> - selected route, * - FIB route, q - queued route, r - rejected route

VRF default table 220:
K>* 10.X.X.0/15 [0/0] via 149.X.X.X, eth0, 05:04:29
K>* 192.X.X.X/32 [0/0] via 149.X.X.X, eth0, 05:05:37

Is it normal to have this routes on table 220 instead of main table (like version 1.1.8)?

Yes, it is normal behaviour. It use strongswan by default https://wiki.strongswan.org/projects/strongswan/wiki/IntroductionTostrongSwan#Routing

Hi Dmitry,

Thanks for the feedback. Really appreciate it.
One more questions:
Is it better to leave the kernel routing in table 220 or move it to main table?

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.