Description

SD Cloud shows the deletion of system services for st0 interfaces for newly imported IPSec VPNs. The preview configuration looks as below.


delete security zones security zone vpn interfaces st0 host-inbound-traffic


Symptoms

SD Cloud shows the deletion of system services for st0 interfaces for newly imported IPSec VPNs. The preview configuration looks as below.


delete security zones security zone vpn interfaces st0 host-inbound-traffic

Solution

This is a bug. SD Cloud should not be deleting the host-inbound-traffic configuration for the st0 interfaces when the IPSec VPNs are freshly imported from the device.


A permanent fix for this problem is available in the 24.4 release of SD Cloud which will be available by end of March 2025.


Till then, the customer can follow the below workaround.


set security zone security zone vpn host-inbound-traffic system services all

set security zone security zone vpn host-inbound-traffic protocols all

Modification History

2025-03-03 : Article Created