[strongSwan] Static IP assignment to roadwarriors by username with same certificate

[Martin Willi]

Hi Steven,

> May I know what the roadwarrior identity alice at strongswan.org stands for?
> Does it means the DN for the certificate issued to Alice?

If you use public key (or PSK) authentication, it is the ID payload
exchanged during IKE. In strongSwan, this ID must be contained in the
certificate as DN or subjectAltName.

If you (additionally) use XAuth (or EAP in IKEv2), the XAuth/EAP
identity is used to look up virtual IPs or other configuration
attributes from any backend.

Regards
Martin