[strongSwan] dhcp plugin: migration from IKEv1 to IKEv2 breaks dhcp leases

[Harald Dunkel]

Hi folks,

if I migrate the road warriors from IKEv1 to IKEv2, then
they get new mac addresses (using identity_lease = yes in
dhcp.conf). This breaks their dhcp lease, and we have to
register the new mac addresses in the dhcp server
configuration for mac-based access control.

Each road warrior has kept his certificate and his ID
(AFAICT), so I wonder if missed some magic to keep the
computed MAC address stable?


Every helpful comment is highly appreciated.

Harri