[strongSwan] IPSec on mobile connection with dynamic ip.

Martin Willi martin at strongswan.org
Wed Jul 21 16:36:32 CEST 2010


> After adsl reconnects 95.191.X.Y is changed to some other ip but IKE tries to send packets with source
> 95.191.X.Y (!).

The daemon should detect the change in your network configuration an try
to update the SAs using MOBIKE. This might work if your clients supports
MOBIKE, but I have heard that ppp interfaces are problematic.

Some logfiles would help to know what exactly is going on.

Regards
Martin





More information about the Users mailing list