[strongSwan-dev] Query about ikev2/dhcp-static-mac

[Martin Willi]

Hi,

>    hardware ethernet            7a:a7:93:70:2b:21;  <-- How does this mac coming in advance?

As the test description says:

> The IP addresses are assigned statically by venus based on the
> user-defined MAC address derived by the dhcpplugin from a hash over
> the client identity. This deterministic MAC generation is activated
> with the strongswan.conf setting charon.plugins.dhcp.identity_lease =
> yes.

This is not a real MAC address, but one generated on behalf of the
client, based on its identity. With that identity_lease option, the
generation is deterministic, so you'll get the same MAC for the same
client identity. This makes the DHCP server handing out the same IP for
the same client identity each time.

Alternatively, you may assign addresses for specific client identities
on your DHCP server using the dhcp-client-identity option; see
ikev2/dhcp-static-client-id.

Regards
Martin