Glad to hear it worked. I also use this combination.

Maybe if there're a couple of other users that use ikev2 plugin + LCP
together - we could make a configuration knob to LCP plugin to explicitly
enable/disable the punt of IKE (e.g. from a configuration).

Also, if you're going to use the IKEv2 plugin please be aware that at the
moment phase 1 rekeying is not implemented, so it might be issues
when using it with a 3rd party IKEv2 speaker. I have a patch that fixed
that hopefully I'll have time in near future to polish it a bit before
upstreaming.

On Tue, 3 Feb 2026 at 10:50, Jimmy Björklund via lists.fd.io
<[email protected]> wrote:

> Thanks! Works like a charm.
> /Jimmy
> ------------------------------
> *Från:* [email protected] <[email protected]> för Stanislav Zaikin
> via lists.fd.io <[email protected]>
> *Skickat:* den 2 februari 2026 19:14
> *Till:* vpp-dev <[email protected]>
> *Ämne:* Re: [vpp-dev] IPSec 25.10 crash.
>
> Hello Jimmy,
>
> You need to comment out a couple of lines in lcp code to get ikev2 plugin
> working together with it. The first 2 punts in lcp_interface_init.
>
> Best regards
>
> On Mon, 2 Feb 2026, 14:27 Jimmy Björklund via lists.fd.io,
> <[email protected]> wrote:
>
> We managed to get it working by disabling the crypto engine !
> I have another question, if enable linux_nl and/or linux_cp the tunnel is
> again not working as expected. Is this a known issue ? I can see the ikev2
> sa but no ipsec sa or tunnel being created.
> /Jimmy
>
>
> Sent from Outlook for Mac
> *From: *[email protected] <[email protected]> on behalf of Benoit
> Ganne (bganne) via lists.fd.io <[email protected]>
> *Date: *Friday, 30 January 2026 at 18:34
> *To: *[email protected] <[email protected]>
> *Subject: *Re: [vpp-dev] IPSec 25.10 crash.
>
> > I have tried to disable the plugin but thy still show in the crypto
> handler list is that expected?
>
> The syntax changed in recent VPP version following refactoring of crypto
> backends, you should be able to disable it with this:
>
>   crypto-engines
> {
>       ipsecmb { disable
> }
>   }
>
> Best
> ben
>
>
>
>
> 
>
>

-- 
Best regards
Stanislav Zaikin
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#26781): https://lists.fd.io/g/vpp-dev/message/26781
Mute This Topic: https://lists.fd.io/mt/117418341/21656
Group Owner: [email protected]
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/14379924/21656/631435203/xyzzy 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to