VTI interface down because interface number created is greater than ipsec32768

[nzkiwi68]

Can we please get this issue fixed in 2.4.5?
https://redmine.pfsense.org/issues/9592

I now have multiple customers with more than 50 IPSEC P1 tunnels and that means I cannot create any new VTI interfaces. If I need to for any reason delete the VTI tunnels that are working, when created again they will most certainly be broken.

I don't like exporting the config, mucking around with notepad++, etc to try and get VTI interfaces working.

Thanks.

[jimp]

The patch in that PR is too high impact to bring in to a release this late in the cycle. Also the person who submitted the PR needs to update it to account for recent changes in the code base.

[nzkiwi68]

I'm hanging out for 2.4.5-p1 and I see the issues have increased to 65 issues as at writing this... and here I am asking if something else can be added to 2.4.5-p1.

Bug 9592 - VTI interface down because interface number created is greater than ipsec32768
https://redmine.pfsense.org/issues/9592

What are the chances of getting 9592 fixed with 2.4.5-p1?

[jimp]

No. It's too large a change on its own and the changes are too intertwined with other major changes made to IPsec in 2.5.0.

[nzkiwi68]

@jimp ok, thanks for the reply.