<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:΢ÈíÑźÚ
}
--></style>
</head>
<body class='hmmessage'>
I just set my storngswan client and server under the <br><h2>UML [Test ikev2/dhcp-dynamic]</h2><br>but I can not assign the client ip address by dhcp server.<br>the client's ipsec.conf:<br># ipsec.conf - strongSwan IPsec configuration file<br># basic configuration<br>config setup<br> crlcheckinterval=180<br> strictcrlpolicy=no<br> plutostart=no<br>conn %default<br> ikelifetime=60m<br> keylife=20m<br> rekeymargin=3m<br> keyingtries=1<br> keyexchange=ikev2<br># Add connections here.<br>conn host-host<br> left=192.168.0.15<br> leftsourceip=%config<br> leftcert=client.pem<br> leftid=client@xxx.com<br> right=192.168.0.7<br> rightsubnet=10.1.0.0/16<br> rightid=server@xxx.com<br> auto=add<br><br>the server's ipsec.conf<br># ipsec.conf - strongSwan IPsec configuration file<br># basic configuration<br>config setup<br> crlcheckinterval=180<br> strictcrlpolicy=no<br> plutostart=no<br>conn %default<br> ikelifetime=60m<br> keylife=20m<br> rekeymargin=3m<br> keyingtries=1<br> keyexchange=ikev2<br> left=192.168.0.7<br> leftsubnet=10.1.0.0/24<br> leftcert=server.pem<br> leftid=server@xxx.com<br># Add connections here.<br>conn host-host<br> right=%any<br> rightsourceip=%dhcp #10.1.0.119<br> auto=add<br><br>when i run command in the client: #ipsec up host-host<br>Got the error information:<br>received INTERNAL_ADDRESS_FAILURE notify, no CHILD_SA built<br><br>and <br>I found the server's log is wrong(I think)<br>14[IKE] peer requested virtual IP %any<br>14[CFG] sending DHCP DISCOVER to 10.1.0.111<br>06[CFG] received DHCP OFFER 10.1.0.122 from %any<br>14[CFG] sending DHCP REQUEST for 10.1.0.122 to %any<br>14[CFG] sending DHCP REQUEST for 10.1.0.122 to %any<br>14[CFG] sending DHCP REQUEST for 10.1.0.122 to %any<br>15[MGR] ignoring request with ID 1, already processing<br>14[CFG] sending DHCP REQUEST for 10.1.0.122 to %any<br>14[CFG] sending DHCP REQUEST for 10.1.0.122 to %any<br>16[MGR] ignoring request with ID 1, already processing<br><br><br>but the UML Test's log is (from:<a href="http://www.strongswan.org/uml/testresults44/ikev2/dhcp-dynamic/moon.daemon.log">http://www.strongswan.org/uml/testresults44/ikev2/dhcp-dynamic/moon.daemon.log</a>)<br><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Simsun; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; font-size: medium;"><pre style="word-wrap: break-word; white-space: pre-wrap;">Jul 30 14:49:09 moon charon: 13[IKE] peer requested virtual IP %any
Jul 30 14:49:09 moon charon: 13[CFG] sending DHCP DISCOVER to 10.1.255.255
Jul 30 14:49:10 moon charon: 09[CFG] received DHCP OFFER 10.1.0.51 from 10.1.0.20
Jul 30 14:49:10 moon charon: 13[CFG] sending DHCP REQUEST for 10.1.0.51 to 10.1.0.20
Jul 30 14:49:10 moon charon: 09[CFG] received DHCP ACK for 10.1.0.51
Jul 30 14:49:10 moon charon: 13[IKE] assigning virtual IP 10.1.0.51 to peer 'dave@strongswan.org<br><br></pre></span>anyone can help me?<br>why I alway got %any in the log,<br>but the UML Test's log is the assigned IP by the DHCP Server.<br><br><br> </body>
</html>