[strongSwan] IP family mismatch

[Claude Tompers]

Hi,

I have a Windows 7 client which has both IPv4 and IPv6 enabled in its configuration.
The server's ipsec.conf defines two profiles, one for IPv4 and one for IPv6.
If I disable the IPv6 profile, the IPv4 profile is chosen, but, because the Windows 7 client already had an IPv6 address once, it is requesting that one again.
The log shows the following error :

Apr 12 16:03:42 vpn6-test charon: 16[IKE] peer requested virtual IP fec0:a18:2341:3440::1
Apr 12 16:03:42 vpn6-test charon: 16[CFG] IP pool address family mismatch
Apr 12 16:03:42 vpn6-test charon: 16[LIB] acquiring address from pool 'ipv4.test' failed
Apr 12 16:03:42 vpn6-test charon: 16[IKE] no virtual IP found, sending INTERNAL_ADDRESS_FAILURE

Is there any workaround for this issue ?
Or is there any way to tell Windows not to make any proposals ?

As long as Windows 7 does not ask for an explicit IPv6 address, i.e. %any6 as it asked for before its first IPv6 address was assigned, the connection was created successfully.

best regards
Claude Tompers

-- 
Claude Tompers
Ingénieur réseau et système
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100415/938f6ed9/attachment.pgp>