[strongSwan] swanctt + dhcp + dns

Kamil Jońca kjonca at o2.pl
Sun Dec 17 08:47:26 CET 2017


I am testing migration from starter config to swanctlt config, and have
issue that cannot resolve.

my config below:
--8<---------------cut here---------------start------------->8---
secrets {
	private {
		file= ....
		secret= [....]
	}
}
connections {

   rw {
      local_addrs  = 192.168.200.200
      pools = dhcp
      local {
         auth = pubkey
         cacerts= [...]
		 certs = [...]
         id = "C = PL, ST = Mazowieckie, O = kjonca.kjonca, OU = ipsec, CN = xxxxxx"
      }
      remote {
         auth = pubkey
      }
      children {
         net-alfa-server {
		    local_ts = 192.168.200.200/24	
			ipcomp=yes
			
         }
      }
   }
}
authorities {
	kaczka{
	crl_uris = file:///etc/swanctl/x509crl/kaczka.pem
	cacert = /etc/swanctl/x509ca/ipsec--kaczka--ca.pem

	}
}
--8<---------------cut here---------------end--------------->8---

1.How with this config I can pass dns server to client?
2. Is it possible to take DNS server from dhcp (and others possible
options too)?


KJ

-- 
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html
There's no time like the pleasant.


More information about the Users mailing list