Gateway not working anymore in routed IPsec (Azure)

[alh]

After upgrading to 21.5 the gateway setup on the IPsec interface as described in this manual

https://docs.opnsense.org/manual/how-tos/ipsec-s2s-route-azure.html

does not work anymore. The error message is:

Code Select Expand

Cannot add IPv4 Gateway Address because no IPv4 address could be found on the interface.

However, I have access to the remote network and all but I do need the gateway for the static route no?

[mimugmail]

Screenshots of P1 and P2 please

[alh]

Here you go, if I understood correctly Phase 1

[alh]

Phase 2

[alh]

And the error message.

[mimugmail]

P1 use start immediate and check if the Tunnel comes up in general

[alh]

The tunnel comes up fine and I can ping the virtual machines on Azure. In the route I find the linked gateway and the gateway itself a bit strange...

[mimugmail]

So does it Work or not? Confused  :o

[alh]

It does somehow work (did not dare to reboot) but why is my gateway "defunct" and why can I not add an IP address to it anymore?

[fog]

I have the same issue with routed ipsec between two OPNSense Firewalls:

If I want add a IP to the Gateway for the Ipsec Interface I get only:

The following input errors were detected:

    Cannot add IPv4 Gateway Address because no IPv4 address could be found on the interface.

If I leave the IP empty the Gateway is defunct.

How can I add a Gateway for routed ipsec?

[mimugmail]

Screenshots please.

[fog]

I can not add the Gateway.

See step 5 from https://docs.opnsense.org/manual/how-tos/ipsec-s2s-route.html#step-5-define-gateways

Possible it is only a problem in the GUI? Can I add a Gateway in the shell with a command?

[mimugmail]

Sceenshot of P1 and P2 please

[fog]

solved by:
opnsense-revert -r 21.1 strongswan
opnsense-revert -r 21.1 opnsense   :(

Now I can add the gateway with ip again.  :)

[mimugmail]

It would more help to test reverting only opnsense and not strongswan and then go back version to version to see which one is affecting. Then the devs can find the commit and fix the error