[strongSwan] swanctt + dhcp + dns

Noel Kuntze noel.kuntze+strongswan-users-ml at thermi.consulting
Mon Dec 18 15:32:26 CET 2017


1. Never did that with swanctl. You have to play around with the pools or dig around. Maybe it's as simple as "connections.<conn>.pools = dhcp" or "connections.<conn>.pools = %dhcp". Maybe it's not.
2. You can't.

On 18.12.2017 15:21, Kamil Jońca wrote:
> Noel Kuntze
> <noel.kuntze+strongswan-users-ml-eJe4+7AOuxYyzzc7d281tti2O/JbrIOy at public.gmane.org>
> writes:
>
>> Use a pool. Look at the UsableExamples[1] page.
>> You can't pass dns servers from DHCP at all. It has nothing to do with
>> the configuration backend you're using.
> I was not too clear probably.
>
> I want to do with swanctl:
> 1. have client addres taken from dhcp
> 2. somehow configure dns to pass (how? )
>
> ie. how to translate from old config:
>
>
> conn xxx
>         left=192.168.200.200
>         leftsubnet=192.168.200.0/24
>         leftid=xxx
>         leftca=yyy
>         leftcert=....
>         rightdns=192.168.200.200
>         right=%any
>         compress=yes
>         rightsourceip=%dhcp
>
>
>
> KJ
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20171218/dc205b13/attachment.sig>


More information about the Users mailing list