<![CDATA[IPSEC Changes Require Reboot]]>Any changes to an IPSEC tunnel requires a reboot to take effect.  Why?

System Netgate SG-2440
BIOS Vendor: coreboot
Version: ADI_RCCVE-01.00.00.12-nodebug
Version 2.3.4-RELEASE-p1 (amd64)
built on Fri Jul 14 14:52:43 CDT 2017
FreeBSD 10.3-RELEASE-p19

]]>https://forum.netgate.com/topic/120714/ipsec-changes-require-rebootRSS for NodeWed, 15 Apr 2026 13:16:49 GMTWed, 27 Sep 2017 12:15:27 GMT60<![CDATA[Reply to IPSEC Changes Require Reboot on Thu, 28 Sep 2017 21:10:09 GMT]]>Nothing special about them, just adding another host or network to the tunnel.  I haven't stopped and started the IPSEC service, just used the icon that shows restart service.  We'll try that.

This config has been running around 7 years and this behavior started around 2 years ago.

]]>https://forum.netgate.com/post/724322https://forum.netgate.com/post/724322Thu, 28 Sep 2017 21:10:09 GMT<![CDATA[Reply to IPSEC Changes Require Reboot on Thu, 28 Sep 2017 15:37:55 GMT]]>@khancock:

If I add another Phase 2 entry I have to reboot.

I make P2 changes all the time and they take effect when expected, you'll have to be more specific. Do these new P2s get added to only a single tunnel? Do they overlap anything else? Anything special about them?

Since this doesn't appear to be happening to anyone else, there must be something distinct about your setup that is triggering the behavior

@khancock:

I tried to restart just IPSEC but it does not work

Did you use the "restart" button or did you actually stop and then start the service as I suggested? A restart doesn't restart IPsec, it only tells strongSwan to reload the configuration file.

]]>https://forum.netgate.com/post/724233https://forum.netgate.com/post/724233Thu, 28 Sep 2017 15:37:55 GMT<![CDATA[Reply to IPSEC Changes Require Reboot on Wed, 27 Sep 2017 22:44:03 GMT]]>If I add another Phase 2 entry I have to reboot.  I tried to restart just IPSEC but it does not work.  I thought this was due to old hardware so I upgraded to NetGate and the problem persists.

]]>https://forum.netgate.com/post/724084https://forum.netgate.com/post/724084Wed, 27 Sep 2017 22:44:03 GMT<![CDATA[Reply to IPSEC Changes Require Reboot on Wed, 27 Sep 2017 15:20:21 GMT]]>What changes, specifically? I haven't ever seen that happen that I can recall.

Next time, instead of a reboot, if the changes do not apply then go to Status > Services and stop the IPsec service and then start it again. Do not use the restart button.

]]>https://forum.netgate.com/post/724007https://forum.netgate.com/post/724007Wed, 27 Sep 2017 15:20:21 GMT