[strongSwan] DHCP!

[Noel Kuntze]

The traffic selector needs to permit the DHCP request through and a DHCP server or relay needs to be run locally.
This is absolutely no problem, other people already set this up and made it work.

On 04.05.2018 15:21, Tom Rymes wrote:
> It's designed for a very specific use case, but if you install it in a sandbox somewhere, you can get a feel for the powershell scripts and other bits that are used to configure the clients.
>
> It's all wrapped around Strongswan, so you can transfer the functionality to your own setup, if you find it helpful.
>
> Tom
>
> On 05/04/2018 9:15 AM, Christian Salway wrote:
>> We are working with very locked down systems so wouldn’t be able to install that software unfortunately but will have a look out of interest,
>> Thanks
>>
>>> On 4 May 2018, at 13:15, Tom Rymes <trymes at rymes.com> wrote:
>>>
>>>> On 05/04/2018 3:45 AM, Christian Salway wrote:
>>>> Thanks to Dirk Hartmann and his scripting idea,  The simplest way to add a VPN connection to Windows 10 that includes the routing to the internal IP, is by running the following commands in PowerShell commands.  This also enables strong ciphers (MODP2048)
>>>> /This is for a username/password VPN available to all users (remove -*AllUserConnection* from the /*Add-VpnConnection*/ command for just the current user)/
>>>
>>> Apple configuration profiles and Windows scripting are definitely magic when done right.
>>>
>>> The gold standard in my experience is Algo (https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-that-works/), which is built on top of StrongSwan:
>>>
>>> - Airdrop a file to an iOS device and you're configured.
>>> - Double-click a file on a mac, and you're configured.
>>> - Run a powershell script on Windows and you're configured.
>>>
>>> It's pretty darned cool, to be honest.
>


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180505/b698a6a5/attachment.sig>