[strongSwan] Resolve plugin doesn't restore /etc/resolv.conf

Martin Willi martin at strongswan.org
Thu Aug 14 10:58:32 CEST 2014


> upon disconnecting the tunnel (swanctl -t --child tunnel) the content
> of /etc/resolv.conf isn't restored to the content there was before.

With that command, usually only the CHILD_SA gets closed, but not the
IKE_SA. IP address, DNS configuration and other attributes are bound to
the lifetime of the IKE_SA in IKEv2, and not to the CHILD_SA.

Have you tried to terminate the connection with the --ike option?


More information about the Users mailing list