Relax requirement for IKE policy #9108

Closed
opened 2025-12-29 20:45:31 +01:00 by adam · 4 comments
Owner

Originally created by @m2martin on GitHub (Jan 18, 2024).

Originally assigned to: @m2martin on GitHub.

Deployment Type

Self-hosted

NetBox Version

v3.7.1

Python Version

3.9

Steps to Reproduce

  1. Go to IKE policies and add a policy
  2. Field Mode is required and provides Aggressive and Main

Expected Behavior

Field Mode is not required.

Observed Behavior

Field Mode is required.

Originally created by @m2martin on GitHub (Jan 18, 2024). Originally assigned to: @m2martin on GitHub. ### Deployment Type Self-hosted ### NetBox Version v3.7.1 ### Python Version 3.9 ### Steps to Reproduce 1. Go to IKE policies and add a policy 2. Field `Mode` is required and provides `Aggressive` and `Main` ### Expected Behavior Field `Mode` _is not_ required. ### Observed Behavior Field `Mode` _is_ required.
adam added the type: bugstatus: acceptedseverity: low labels 2025-12-29 20:45:31 +01:00
adam closed this issue 2025-12-29 20:45:32 +01:00
Author
Owner

@m2martin commented on GitHub (Jan 18, 2024):

Background:

One of the substential differences between IKEv1 and IKEv2 is the initial message exchange which has no configurable modes (Main/Aggressive) compared to v1.

The field Mode should not be required like Authentication algo in IKE proposals which depends on the encryption algo (CBC/GCM) (see #14499).

...yes I know...blank=True would need a migration.

@m2martin commented on GitHub (Jan 18, 2024): Background: One of the substential differences between IKEv1 and IKEv2 is the initial message exchange which has no configurable modes (Main/Aggressive) compared to v1. The field `Mode` should not be required like Authentication algo in IKE proposals which depends on the encryption algo (CBC/GCM) (see #14499). ...yes I know...`blank=True` would need a migration.
Author
Owner

@DanSheps commented on GitHub (Jan 19, 2024):

If someone wants to tackle this, the best way forward would be:

  • set blank=True and null=True on the model (build the migration as well
  • Edit the model clean method to require IKEv1 to have a mode of any of the choices
@DanSheps commented on GitHub (Jan 19, 2024): If someone wants to tackle this, the best way forward would be: * set `blank=True` and `null=True` on the model (build the migration as well * Edit the model `clean` method to require IKEv1 to have a mode of any of the choices
Author
Owner

@m2martin commented on GitHub (Jan 19, 2024):

If the change is basically accepted, I'd implement it accordingly.

@m2martin commented on GitHub (Jan 19, 2024): If the change is basically accepted, I'd implement it accordingly.
Author
Owner

@DanSheps commented on GitHub (Jan 19, 2024):

If the change is basically accepted, I'd implement it accordingly.

All you @m2martin

@DanSheps commented on GitHub (Jan 19, 2024): > If the change is basically accepted, I'd implement it accordingly. All you @m2martin
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#9108