Guest

Preview Tool

Cisco Bug: CSCvt67122 - vManage UI should make IKE1 pre-shared key mandatory, default value is causing template push failure

Last Modified

Sep 04, 2020

Products (1)

  • Cisco SD-WAN

Known Affected Releases

20.1

Description (partial)

Symptom:
In  "Cisco VPN Interface IPsec" feature template under "IKE" section if the user selects IKE version 1 then for "IKE Authentication" the "Preshared key" if the "Default" option is selected then it is not adding the required expected key value resulting in failure in template push.

Conditions:
In  "Cisco VPN Interface IPsec" feature template under "IKE" section if the user selects IKE version 1 then for "IKE Authentication" the "Preshared key" if the "Default" option is selected then the configuration is missing the required key value. 
With "Default" option selected the config looks like :
!
  crypto keyring if-ipsec1-ikev1-keyring
   pre-shared-key address 10.1.1.10 key 
  !
which is invalid as the device will reject this due to syntax error as CLI is not complete and missing the key value.

Please refer the image attached in the enclosure section.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.