# Ipsec is degraded

**URL:** <https://forums.suse.com/t/ipsec-is-degraded/7019>\
**Category:** Rancher 1.x\
**Created:** [August 3, 2017, 2:57pm UTC](https://forums.suse.com/t/ipsec-is-degraded/7019 "2017-08-03T14:57:28Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![dadoherty](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/dadoherty/32/792_2.png) [@dadoherty](https://forums.suse.com/u/dadoherty)\
**Post date:** [August 3, 2017, 2:57pm UTC](https://forums.suse.com/t/ipsec-is-degraded/7019/1 "2017-08-03T14:57:28Z")

</div>

I have just added a new environment and host to my rancher server.

The host starts, however, all the infrastructure stacks are either “unhealthy” or “degraded”

I checked the logs of these services and I am getting “Removing bad service instance: Timeout getting IP address"  
in all the stacks except for the “network-services” stack where the “metadata + 1sidekick” is getting the following error  
"Activating (Expected state running but got stopped: Error response from daemon: cannot join network of a non running container: 8df930d161974c20f8929bb73827992c2b4de670d4b8e6632827e405c68afb19)”

Has aanyone else experienced this. I am at a loss as to what is wrong here.

---

<div class="post-metadata">

**Author:** ![dadoherty](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/dadoherty/32/792_2.png) [@dadoherty](https://forums.suse.com/u/dadoherty)\
**Post date:** [August 3, 2017, 3:00pm UTC](https://forums.suse.com/t/ipsec-is-degraded/7019/2 "2017-08-03T15:00:54Z")

</div>

I forgot to post the version I am using. It is v1.6.6

---

<div class="post-metadata">

**Author:** ![leodotcloud](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/leodotcloud/32/3103_2.png) [@leodotcloud](https://forums.suse.com/u/leodotcloud)\
**Post date:** [August 10, 2017, 6:54pm UTC](https://forums.suse.com/t/ipsec-is-degraded/7019/3 "2017-08-10T18:54:14Z")

</div>

High possibility that you are hitting: [https://github.com/rancher/rancher/issues/8383](https://github.com/rancher/rancher/issues/8383).

As suggested in the comments, can you please make sure you have registered the hosts correctly?

---

<div class="post-metadata">

**Author:** ![dadoherty](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/dadoherty/32/792_2.png) [@dadoherty](https://forums.suse.com/u/dadoherty)\
**Post date:** [August 11, 2017, 12:55pm UTC](https://forums.suse.com/t/ipsec-is-degraded/7019/4 "2017-08-11T12:55:12Z")

</div>

thank you. That is indeed what was wrong. I was using its public ipaddress  
instead of the private one on the same network as the rancher/server. As a  
result, the ip in the hosts display was “none”.

---

<div class="post-metadata">

**Author:** ![leodotcloud](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/leodotcloud/32/3103_2.png) [@leodotcloud](https://forums.suse.com/u/leodotcloud)\
**Post date:** [November 6, 2017, 5:54pm UTC](https://forums.suse.com/t/ipsec-is-degraded/7019/5 "2017-11-06T17:54:15Z")

</div>