Prefer older IPsec SAs

kaneda

This item is always checked, you can uncheck it, save and next time you enter on that section will be checked again?
I thought that this was solved.

jimp

On this morning's snapshot I can check and uncheck it and it saves the value properly. Can you update and try it again?

spiritbreaker

Hi Jimp,

i updated pfsense to snapshot Sep 13 08:05:00 but problem seems not to be solved.

After uncheck and save it looks right but after reload of page its checked again.

Is it possible to change variable on console?

EDIT:

got it

sysctl -w net.key.preferred_oldsa=0

I changed vpn.inc to turn it off.

cya

jimp

Not sure why I couldn't reproduce this before. I can reproduce it now. I'll have a look at it soon.

I opened a ticket for it, too:
http://redmine.pfsense.org/issues/907

_igor_

I can confirm that it doesn't work:

built on Sun Sep 19 19:15:37 EDT 2010

I can uncheck the setting, but on reloading the page its ticked again.

jimp

I just committed a fix. It should be in newer snapshots, or you can either gitsync or apply the patch from the repo manually:

https://rcs.pfsense.org/projects/pfsense/repos/mainline/commits/7b2fdac49b28d638a38c9f51a7222e25d386bcca