[strongSwan] Nameservers over ikev2
martin at strongswan.org
Fri Jul 1 13:55:16 CEST 2011
> is it possible to set the dns servers that are pushed to the client
> seperatly for each conn entry in ipsec.conf?
Using the attr plugin and the associated strongswan.conf options, no,
currently not. These are always global.
The more advanced attr-sql plugin can define per-pool or even
per-identity attributes. You can define a pool name per connection using
the rightsourceip=%poolname option. If you enable the attr-sql backend
, you can create address pools and associated attributes for that
pool using the "ipsec pool" command.
More information about the Users