<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
hmm this doesn't seem to be working <br>
<br>
<div class="moz-cite-prefix">On 3/11/21 1:20 PM, Volodymyr Litovka
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:26998b5d-d067-f05e-68aa-044c21bd3000@funlab.cc">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<p>Hi,</p>
<p>I pass DNS using 'attr' module:</p>
<pre>$ cat /etc/strongswan.d/charon/attr.conf
# Section to specify arbitrary attributes that are assigned to a peer via
# configuration payload (CP).
attr {
# <attr> is an attribute name or an integer, values can be an IP address,
# subnet or arbitrary value.
# <attr> =
dns = 100.100.0.1
# Whether to load the plugin. Can also be an integer to increase the
# priority of this plugin.
load = yes
}
</pre>
<div class="moz-cite-prefix">On 11.03.2021 13:08, Gregory Edigarov
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:3d2ae7b2-a14d-7ad3-b782-34fd0ca65189@qarea.com">
<pre class="moz-quote-pre" wrap="">Hello,
strongSwan 5.6.2 on both sides.
server side config:
conn ikev2-vpn
auto=add
compress=no
type=tunnel
keyexchange=ikev2
ike=aes256-sha1-modp1024
esp=aes256-sha1
fragmentation=yes
forceencaps=yes
dpdaction=clear
dpddelay=300s
rekey=no
left=%any
<a class="moz-txt-link-abbreviated" href="mailto:leftid=@example.my.domain" moz-do-not-send="true">leftid=@example.my.domain</a>
leftauth=pubkey
leftcert=certificate.pem
leftsendcert=always
leftsubnet=0.0.0.0/0
leftfirewall=yes
right=%any
rightid=%any
rightauth=eap-radius
rightsourceip=10.255.255.0/24
rightsendcert=never
rightdns=192.168.12.2,192.168.21.2,192.168.111.2
eap_identity=%identity
client side config:
conn ike-test
auto=start
fragmentation=yes
keyexchange=ikev2
right=example.my.domain
<a class="moz-txt-link-abbreviated" href="mailto:rightid=@example.my.domain" moz-do-not-send="true">rightid=@example.my.domain</a>
rightauth=pubkey
rightsubnet=0.0.0.0/0
leftsourceip=%config
leftid=username
leftauth=eap-mschapv2
eap_identity=%identity
connection got setup ok, but no dns is installed on client's side. also
tried with windows client, with same result
is it radius overriding rightdns setting? i do not put anything but
authentication into radius yet. may it be the reason?
thank you
--
With best regards,
Gregory Edigarov
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Volodymyr Litovka
"Vision without Execution is Hallucination." -- Thomas Edison</pre>
</blockquote>
<br>
</body>
</html>