Last Modified: Sep 13, 2023
Known Affected Versions:
12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Opened: May 12, 2015 Severity: 3-Major
MCP validation does not throw an error when the profile of a tunnel is changed to another type after a tunnel is created.
The profile of a tunnel can be changed from one type to another without any MCP validation error, and the resulting tunnel with a new profile type may not work.
The profile of a tunnel is changed from one type to another (for example, from an IPIP profile to an IPsec profile) after the tunnel is created.
If the profile type of a tunnel needs to be changed, the tunnel should be deleted first and recreated with a new profile type.
MCP validation is in place to prevent the profile of a tunnel is changed from one type to another after the tunnel is created.