[strongSwan] dhcp plugin: migration from IKEv1 to IKEv2 breaks dhcp leases
Tobias Brunner
tobias at strongswan.org
Tue Jul 12 10:05:03 CEST 2016
Hi Harald,
> if I migrate the road warriors from IKEv1 to IKEv2, then
> they get new mac addresses (using identity_lease = yes in
> dhcp.conf).
Is that the only thing you changed? Same strongSwan version?
> Each road warrior has kept his certificate and his ID
> (AFAICT), so I wonder if missed some magic to keep the
> computed MAC address stable?
What kind of authentication did you use for IKEv1? Certificates only or
combined with XAuth? What about IKEv2? No EAP?
Regards,
Tobias
More information about the Users
mailing list