IPSEC fail after move to Business Edition

[rafaelbs]

Hi,


I have just moved from community version to business edition. Then, I restore the backup and most of functionalities were restored, except IPSEC.

Phase 1 looks ok, but 2 does not connect.

Logs show the following messages:

unable to delete SAD entry with SPI c9a3a7b4: No such process (3)
failed to establish CHILD_SA, keeping IKE_SA
unable to install inbound and outbound IPsec SA (SAD) in kernel
unable to add SAD entry with SPI c9a3a7b4: Invalid argument (22)

Important to mention that Business Edition runs a previous version of community.

Any idea about what this could be?

Thanks.
Rafael

[Patrick M. Hausen]

Which versions exactly?

[rafaelbs]

I was running 25.7 from community edition and now I'm running Business Edition 25.4.

All updates were applied.

[viragomann]

Why you didn't wait on 25.10 as suggested in your other thread? ◔_◔

25.4 BE is based on 25.1 CE. So your configuration is probably not fully compatible with the installed version now.

[rafaelbs]

I wish I could wait, but there was an urgency that force us to do it today. But I appreciate your recommendation.

So I guess my best option is to rebuild the IPSEC configs, thanks for informing about incompatible version.

Regards.
Rafael

[rafaelbs]

I have just rebuilt my IPSEC tunnel and it did not work, and logs shows the same errors.

Any ideas about what could be wrong?

[viragomann]

If you do some quick searches you will find threads, where the reason for this error was a missing IPSec kernel module.
Don't know, if it's the same with your installation, but try to load it manually.