Hi Harald, > if I migrate the road warriors from IKEv1 to IKEv2, then > they get new mac addresses (using identity_lease = yes in > dhcp.conf).
Is that the only thing you changed? Same strongSwan version? > Each road warrior has kept his certificate and his ID > (AFAICT), so I wonder if missed some magic to keep the > computed MAC address stable? What kind of authentication did you use for IKEv1? Certificates only or combined with XAuth? What about IKEv2? No EAP? Regards, Tobias _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
