Hi,
Today I was trying with one setup of Strongswan and discovered that
leftid parameters is ignored if you set it outside of the "conn
%default" and cert DN is used as ID.
For example:
conn LabMPLS-site1
ike=aes128-sha1-modp2048!
esp=aes128-sha1-modp2048!
left=172.16.1.129
right=%any
rightsubnet=10.12.160.254/32
[email protected]
leftcert=site1.pem
leftsubnet=10.0.0.0/8
Now, the status of "ipsec statusall" is:
Connections:
LabMPLS-site1: 172.16.1.129...%any, dpddelay=30s
LabMPLS-site1: local: [C=AR, ST=Buenos Aires, L=Ciudad Autonoma de
Buenos Aires, O=XXXX, OU=YYYY, CN=site1] uses public key
authentication
LabMPLS-site1: cert: "C=AR, ST=Buenos Aires, L=Ciudad Autonoma de
Buenos Aires, O=XXXX, OU=YYYY, CN=site1"
LabMPLS-site1: remote: [%any] uses any authentication
LabMPLS-site1: child: 10.0.0.0/8 === 10.12.160.254/32 , dpdaction=clear
If I move leftid to "%default", statusall is:
LabMPLS-site1: local: [site1.example.com] uses public key authentication
Is this intentional or is it a bug?
I was trying to use differents leftids for each connection.
Regards,
Diego
--
Diego Woitasen
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users
