<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<div style="font-family: Calibri, Helvetica, sans-serif, serif, EmojiFont">
<div><font size="3" face="Calibri,Helvetica,sans-serif" color="black"><span>I think, i have found the setting for the DNS server or at least a way to change them. There was a file /etc/strongswan.d/user.conf with the following content:</span></font></div>
<div><font size="3" face="Calibri,Helvetica,sans-serif" color="black"><span><br>
</span></font></div>
<div><font size="3" face="Calibri,Helvetica,sans-serif" color="black"><span>charon {<br>
<div># DNS server assigned to peer via configuration payload (CP).<br>
</div>
<div>dns1 = 8.8.8.8<br>
</div>
<div>dns2 = <font size="3" face="Calibri,Helvetica,sans-serif" color="black">8.8.4.4</font><br>
</div>
<div><br>
</div>
<div># Number of worker threads in charon.<br>
</div>
<div>threads = 8<br>
</div>
<div><br>
</div>
<div># Name of the user the daemon changes to after startup.<br>
</div>
<div>user = strongswan<br>
</div>
}<br>
</span></font></div>
<div><font size="3" face="Calibri,Helvetica,sans-serif" color="black"><span><br>
</span></font></div>
<div><font size="3" face="Calibri,Helvetica,sans-serif" color="black"><span>It seems like that this setting overrides the DNS servers in ipsec.conf. I thought, it was the other way.
</span></font></div>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif, serif, EmojiFont"><br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif, serif, EmojiFont">Android was a little bit strange. I added the certificate to the Keystore and could select "IPSec IKEv2 RSA" in the build VPN from the Galaxy S7. I selected then the imported certificate
in both, the user-certificate and as ca-certificate, saved the profile and connected. This failed. So i opened the profile again, changed nothing, closed it with "cancel" and connected again. Now the connection was established successfully. I don't no why
the first try failed. But now it seems to be, that i could use the config on both, Android and Windows 10.</div>
<div style="font-family: Calibri, Helvetica, sans-serif, serif, EmojiFont"><br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif, serif, EmojiFont">I have found another problem on Windows 10. My Ethernet Adapter and the Wifi Adapter have both the DNS from my carrier and i didn't want to change that. When i look at
<a href="https://www.dnsleaktest.com/">https://www.dnsleaktest.com/</a>, i can see that there is the DNS from the carrier. When i now connect to the VPN and re-check again, i see my DNS (which forwards to OpenDNS) and additionally the carrier DNS. This surprises
me a lot. I thought that VPN is the only connection, which sends and receives query's other the Internet. Specially, since i set the checkbox for the VPN Adapter as "Standard-Gateway. Do you have any ideas?</div>
</div>
</body>
</html>