<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000066">
<br>
<div class="moz-cite-prefix">On 03/29/2018 10:21 AM, Andreas Steffen
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:b6508517-9c2a-0e1e-2328-056679631ead@strongswan.org">
<pre wrap="">Hi,
yes you can fully integrate a remote host into a LAN by using the
farp and dhcp plugins on the VPN gateway so that the gateway
acts as an ARP proxy for the remote clients. Have a look at the
following example scenario based on swanctl:
<a class="moz-txt-link-freetext" href="https://www.strongswan.org/testing/testresults/swanctl/dhcp-dynamic/">https://www.strongswan.org/testing/testresults/swanctl/dhcp-dynamic/</a>
In swanctl.conf
<a class="moz-txt-link-freetext" href="https://www.strongswan.org/testing/testresults/swanctl/dhcp-dynamic/moon.swanctl.conf">https://www.strongswan.org/testing/testresults/swanctl/dhcp-dynamic/moon.swanctl.conf</a>
use pools = dhcp and in strongswan.conf
<a class="moz-txt-link-freetext" href="https://www.strongswan.org/testing/testresults/swanctl/dhcp-dynamic/moon.strongswan.conf">https://www.strongswan.org/testing/testresults/swanctl/dhcp-dynamic/moon.strongswan.conf</a>
define the DCHP server to be used.
Regards
Andreas
</pre>
</blockquote>
Thanks Andreas. You likely know (but for the benefit of others),
things are done differently in RHEL. For the plugins normally
loaded by /etc/strongswan/strongswan.conf, in the case of RHEL
there's just a call to:<br>
charon {<br>
load_modular = yes<br>
plugins {<br>
include strongswan.d/charon/*.conf<br>
}<br>
}<br>
<br>
... and in that directory there's a .conf for each plugin. Given
the charon.log, all required plugins are already being loaded
without my intervention (at least for charon, Idk about swanctl),
including farp and dhcp. Since I no longer use the stroke plugin I
set in its .conf file load = no. And in dhcp.conf I set server =
192.168.1.10 which will be the LAN DHCP server.<br>
<br>
Thing is since I run servers I've always used static IPs, so I'll
have to figure out DHCP predictable assignment. But with the
transition to IPV6 I will be using DHCP exclusively. (for the love
of all that's holy)<br>
<br>
<br>
<br>
<br>
<br>
</body>
</html>