VPN PFS Group - None is missing #8944

Closed
opened 2025-12-29 20:43:09 +01:00 by adam · 4 comments
Owner

Originally created by @PieterL75 on GitHub (Dec 11, 2023).

Deployment Type

Self-hosted

NetBox Version

v3.7-beta1

Python Version

3.8

Steps to Reproduce

  1. Create an IKE or IPSec policy
  2. set PFS to 'None'

Expected Behavior

None is not a valid option.

Observed Behavior

PFS is not always configured and then set to None. The dashes do not reflect that properly.

Originally created by @PieterL75 on GitHub (Dec 11, 2023). ### Deployment Type Self-hosted ### NetBox Version v3.7-beta1 ### Python Version 3.8 ### Steps to Reproduce 1. Create an IKE or IPSec policy 2. set PFS to 'None' ### Expected Behavior None is not a valid option. ### Observed Behavior PFS is not always configured and then set to None. The dashes do not reflect that properly.
adam closed this issue 2025-12-29 20:43:09 +01:00
Author
Owner

@jeremystretch commented on GitHub (Dec 11, 2023):

  1. Create an IKE or IPSec policy

Which is it? PFS group applies only to IPSec policies.

PFS is not always configured and then set to None.

In which case, the field is left null. What specifically do you believe warrants a bug report?

@jeremystretch commented on GitHub (Dec 11, 2023): > 1. Create an IKE or IPSec policy Which is it? PFS group applies only to IPSec policies. > PFS is not always configured and then set to None. In which case, the field is left null. What specifically do you believe warrants a bug report?
Author
Owner

@PieterL75 commented on GitHub (Dec 11, 2023):

Leaving it blank is not specific enough. Having 'None' in there, really shows that there was no oversight in selecting the group.
You have DH in IPSec PFS DH GRoup and also in IKE DH Groups

@PieterL75 commented on GitHub (Dec 11, 2023): Leaving it blank is not specific enough. Having 'None' in there, really shows that there was no oversight in selecting the group. You have DH in IPSec PFS DH GRoup and also in IKE DH Groups
Author
Owner

@DanSheps commented on GitHub (Dec 11, 2023):

Leaving it blank is not specific enough. Having 'None' in there, really shows that there was no oversight in selecting the group. You have DH in IPSec PFS DH GRoup and also in IKE DH Groups

I don't agree with this. None is very specific in that PFS is not in use/configured, and universally --- is seen as "not configured" when viewing items like this in a modern web UI. Leaving it blank is "null" which also equates to "not configured"

@DanSheps commented on GitHub (Dec 11, 2023): > Leaving it blank is not specific enough. Having 'None' in there, really shows that there was no oversight in selecting the group. You have DH in IPSec PFS DH GRoup and also in IKE DH Groups I don't agree with this. None is very specific in that PFS is not in use/configured, and universally `---` is seen as "not configured" when viewing items like this in a modern web UI. Leaving it blank is "null" which also equates to "not configured"
Author
Owner

@jeremystretch commented on GitHub (Dec 12, 2023):

Agree with @DanSheps; this is standard convention across the entire application.

@jeremystretch commented on GitHub (Dec 12, 2023): Agree with @DanSheps; this is standard convention across the entire application.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#8944