Bug 1854259

Summary:	Add TCP port 4500 to the IPsec service
Product:	Red Hat Enterprise Linux 8	Reporter:	Paul Wouters <pwouters>
Component:	firewalld	Assignee:	Eric Garver <egarver>
Status:	CLOSED ERRATA	QA Contact:	Jiri Peska <jpeska>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	8.4	CC:	jpeska, todoleza
Target Milestone:	rc	Keywords:	Upstream
Target Release:	8.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	firewalld-0.8.2-3.el8	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-05-18 14:58:48 UTC	Type:	Enhancement
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Paul Wouters 2020-07-07 00:52:32 UTC

For IKE and IPsec, we are adding support for IKE over TCP and ESP over TCP. This uses port 4500.

I also updated the rather old description of the service in the upstream PR I filed for this.

The Linux kernel for 8.3.0 should already support this for IPsec over TCP

Libreswan 3.33 will add support for IKE over TCP. This is planned for RHEL 8.4.0

upstream PR:  https://github.com/firewalld/firewalld/pull/665

Comment 1 Eric Garver 2020-07-07 11:23:02 UTC

upstream:

  8c4fb4f65871 ("improvement(service): IPsec: Update description and add TCP port 4500")

Comment 10 errata-xmlrpc 2021-05-18 14:58:48 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (firewalld bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:1643