[strongSwan] Dynamic IP to VPS site-to-site

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Zesen,

I could reproduce this issue and opened a ticket [1] for it.
If you figure out more things about this issue or more cases in which that happens,
please add that information to the ticket.
To add comment tickets, you need an account on strongswan.org. You are free to register
on the site.

[1] https://wiki.strongswan.org/issues/803

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 24.12.2014 um 15:45 schrieb Zesen Qian:
> Noel Kuntze <noel at familie-kuntze.de> writes:
>
>> Hello Eric,
>>
>> See [1] for authentication using X509 certificates and site-to-site tunnels.
>>
>> [1] http://www.strongswan.org/uml/testresults/ikev2/net2net-cert/
>>
>> Mit freundlichen Grüßen/Regards,
>> Noel Kuntze
>>
>> GPG Key ID: 0x63EC6658
>> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>>
>> Am 24.12.2014 um 00:42 schrieb Eric Zhang:
>>> How can I use  RSA authentication with X.509 certificates to setup ip tunnel between my PPPoE to VPS (which has fix IP)?
>>>
>>> Thanks
>>>
>>> Eric
>>>
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.strongswan.org
>> https://lists.strongswan.org/mailman/listinfo/users
> Hello Noel,
>       I guess the question Eric want to ask is mainly about site-to-site
>       with "dynamic IP" on one side, while the other side has fixed IP.
>       I 'm also eager to know since it's my situation too. :) My IPv6
>       address is dynamic.
>       If I ommit the left= paramter, which defaults to %any, it
>       sometimes(and randomly) would use ::1 on local, which surely
>       won't success. Other times it would use the global address which
>       works just find.
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=+KRA
-----END PGP SIGNATURE-----