[strongSwan-dev] null IDr

Martin Willi martin at strongswan.org
Tue Jan 8 09:26:14 CET 2013


Hi Poonam,

> Can anyone please tell me how can we send NULL IDr in IKE_AUTH message?

What's a NULL IDr?

As responder, you always have to send an IDr in IKE_AUTH, it is required
by IKEv2. As initiator, charon sends an IDr only if it is defined by
"rightid" (or inherited from "right" by default). You can omit the
payload if it contains an %any ID or any form of a wildcard. Try to set
rightid=%any to omit IDr on the initiator.

Regards
Martin





More information about the Dev mailing list