[strongSwan] Getting framed-ip attribute from radius without assigning to right

[Roger Skjetlein]

The client gets ip from a standard virtual pool in strongswan and then i
setup trafficmanagement etc running the script. In certain cases I want to
nat the clients given adress to the framed-ip. A usecase is eg. the
framed-ip will be the source address for any number of ips assigned from
the virtual pool.

eg.
the client connect with two devices which again are assigned two different
ips from the virtual pool, but the source address will always be the framed
ip for both.

On Mon, Aug 24, 2015 at 6:50 PM, Andreas Steffen <
andreas.steffen at strongswan.org> wrote:

> Hi Roger,
>
> how is this going to work if the client does not install the framed-ip?
>
> Regards
>
> Andreas
>
>
> On 24.08.2015 17:44, Roger Skjetlein wrote:
>
>> Hi,
>>
>> the current setup uses eap-radius and we do have framed ip set for some
>> clients due to traffic management and policies.
>>
>> The question is if it's possible to get or use the framed-ip from radius
>> in the updown script without assigning the ip to the client?
>>
>> Regards,
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.strongswan.org
>> https://lists.strongswan.org/mailman/listinfo/users
>>
>>
> --
> ======================================================================
> Andreas Steffen                         andreas.steffen at strongswan.org
> strongSwan - the Open Source VPN Solution!          www.strongswan.org
> Institute for Internet Technologies and Applications
> University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[ITA-HSR]==
>
>


-- 
"Over vidden flyger renen;
efter den i vind og væde! -
Bedre det, end bryde stenen
op af fattig jord dernede!"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150824/a612f0f5/attachment-0001.html>