[strongSwan] dhcp plugin: migration from IKEv1 to IKEv2 breaks dhcp leases
harald.dunkel at aixigo.de
Fri Jul 8 14:08:04 CEST 2016
if I migrate the road warriors from IKEv1 to IKEv2, then
they get new mac addresses (using identity_lease = yes in
dhcp.conf). This breaks their dhcp lease, and we have to
register the new mac addresses in the dhcp server
configuration for mac-based access control.
Each road warrior has kept his certificate and his ID
(AFAICT), so I wonder if missed some magic to keep the
computed MAC address stable?
Every helpful comment is highly appreciated.
More information about the Users