<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:'Courier New', courier, monaco, monospace, sans-serif;font-size:10pt"><div><span style="font-family: arial, helvetica, sans-serif; font-size: 10pt; background-color: white; ">Hi Tobias,</span></div><div style="font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:10pt"><div style="font-size: 10pt; font-family: arial, helvetica, sans-serif; "><br></div><div style="font-size: 10pt; font-family: arial, helvetica, sans-serif; ">My client is configured with </div><div style="font-size: 10pt; font-family: arial, helvetica, sans-serif; ">leftsourceip=%config</div><div style="font-size: 10pt; font-family: arial, helvetica, sans-serif; "><br></div><div style="font-size: 10pt; font-family: arial, helvetica, sans-serif; ">It properly installs the virtual IP from the config payload, but the code</div><div style="font-size: 10pt;
font-family: arial, helvetica, sans-serif; ">does not appear to process DNS entries? Still perusing the code.</div><div style="font-size: 10pt; font-family: arial, helvetica, sans-serif; ">Believe the code should be in src/libcharon/sa/ike_sa.c?</div><div style="font-size: 10pt; font-family: arial, helvetica, sans-serif; "><br></div><div style="font-size: 10pt; font-family: arial, helvetica, sans-serif; ">BR,</div><div style="font-size: 10pt; font-family: arial, helvetica, sans-serif; ">-Milton</div><div><br></div><div style="font-family:arial, helvetica, sans-serif;font-size:10pt"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> Tobias Brunner <tobias@strongswan.org><br><b><span style="font-weight: bold;">To:</span></b> Milton Lie <mlie@swbell.net><br><b><span style="font-weight: bold;">Cc:</span></b> Users@lists.strongswan.org<br><b><span style="font-weight: bold;">Sent:</span></b> Tue,
January 3, 2012 2:12:47 PM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: dns entries in config payload<br></font><br>
Hi Milton,</div><div style="font-family:arial, helvetica, sans-serif;font-size:10pt"><br></div><div style="font-family:arial, helvetica, sans-serif;font-size:10pt"><br></div><div style="font-family:arial, helvetica, sans-serif;font-size:10pt">> Does libcharon process dns entries in the IKEv2 config payload?<br>> I defined following in /etc/strongswan.conf<br>> <br>> charon {<br>> dns1 = 8.8.8.8<br>> dns2 = 8.8.4.4<br>> }<br>> <br>> but the client does not appear to change local dns configuration.<br><br>The IKEv2 daemon charon currently only supports the CFG_REQUEST and<br>CFG_REPLY pair of configuration payloads. So in order for the gateway<br>to send config payloads to the client the latter has to request a list<br>of attributes. The only way to make charon as a client do so is by<br>having it request an internal IP address from the gateway. That is, the<br>client has to be configured with
leftsourceip=%config.<br><br>Regards,<br>Tobias<br></div></div><div style="position:fixed"></div>
</div></body></html>