[strongSwan] dhcp plugin: migration from IKEv1 to IKEv2 breaks dhcp leases

Tobias Brunner tobias at strongswan.org
Tue Jul 12 10:05:03 CEST 2016

Hi Harald,

> if I migrate the road warriors from IKEv1 to IKEv2, then
> they get new mac addresses (using identity_lease = yes in
> dhcp.conf).

Is that the only thing you changed?  Same strongSwan version?

> Each road warrior has kept his certificate and his ID
> (AFAICT), so I wonder if missed some magic to keep the
> computed MAC address stable?

What kind of authentication did you use for IKEv1?  Certificates only or
combined with XAuth?  What about IKEv2?  No EAP?


More information about the Users mailing list