When I change "rightsourceip=10.0.0.0/24" to "rightsourceip=%radius",
strongSwan is still giving out ip addresses from that initial pool
instead of using the Framed-Ip-Address (they are different subnets):

How did you reload the config? Is there another config that defines the
10.0.0.0/24 pool (maybe post your complete config)?

It was an issue on my end. When I did "service strongswan stop" and "service ipsec stop", charon was still running. I have no idea. Killed charon manually, started everything again and it's fine now. Both service commands also stop charon now.
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to