Hello Klaus, if the roadwarriors have dynamic IP addresses then IKEv1 Main Mode supports only one shared PSK. With IKEv2 each roadwarrior can have a PSK of her own".
Regards Andreas On 11/22/2011 10:41 AM, Klaus Darilion wrote: > Hi! > > I wonder if it's possible to have the road-warrior setup with different > PSKs for different users? E.g. if strongswan fails to decode a packet > with the PSK it should find for another PSK with matching IP addresses? > > I tried: > > 22.19.53.13 %any : PSK "pass1" > 22.19.53.13 %any : PSK "pass2" > 22.19.53.13 %any : PSK "pass3" > > I seems that stronSwan only uses the first match when decoding the packet. > > Is there any workaround to use different PSKs for the road warriors? > > > Thanks > Klaus ====================================================================== Andreas Steffen [email protected] strongSwan - the Linux VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]== _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
