[strongSwan] Weird NAT IP as username.

Kris KRI2183876 at maricopa.edu
Sat Apr 6 16:08:59 CEST 2013


I got weird log in Strongswan like:

Apr  3 06:31:36 13[ENC] parsed IKE_AUTH request 6 [ AUTH ]
Apr  3 06:31:36 13[IKE] authentication of '192.168.3.254' with EAP
successful
Apr  3 06:31:36 13[IKE] authentication of 'xx.com' (myself) with EAP
Apr  3 06:31:36 13[IKE] IKE_SA win7[16115] established between 19.45.16.1[
xx.com]...12.46.25.8[192.168.3.254]

Apr  3 06:31:36 13[IKE] authentication of '192.168.3.254' with EAP
successful

How could this possible? '192.168.3.254' isn't my Radius' user at all, how
could it act like VPN username ?

I'm runing 5.0.2dr4, is this a bug or my config mistake?

conn win7
        keyexchange=ikev2
        left=%any
        leftid=xx.com
        leftsubnet=0.0.0.0/0
        leftauth=pubkey
        leftcert=gw.cer
        right=%any
        rightsendcert=never
        rightauth=eap-radius
        eap_identity=%identity
        rightsourceip=%ippool
        ikelifetime=48h
        lifetime=48h
        rekeymargin=9m
        rekey=no
        reauth=no
        dpddelay=30
        dpdtimeout=150
        dpdaction=clear

--
Kris
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20130406/aaca485c/attachment.html>


More information about the Users mailing list