[strongSwan] ikev2 - configuration payload in spite of explicit virtual IP address

Martin Willi martin at strongswan.org
Tue Nov 2 10:23:48 CET 2010


Hi Laurence,

> We don't expect that the client request an address from the responder
> and configured the strongswan client for IKEv2 with an explicit
> virtual IP address (leftsourceip=192.168.10.20).

An IP specified with leftsourceip is always requested via a
configuration payload in IKEv2, even if it is fixed. If you don't want
this, just omit the leftsourceip parameter.

Of course you'll have to make sure your source IP is in the negotiated
tunnel, e.g. by settings leftsubnet=192.168.10.20/32. Also, the IP
address is not installed by the daemon.

Regards
Martin






More information about the Users mailing list