How I can change leftid for strongswan? It always CN=123.123.123.123 no matter what I configure in ipsec.conf, even leftid=%any doesn't work.

swanctl -L:

IKEv2-tunnel: IKEv2, no reauthentication, no rekeying, dpd delay 30s
  local:  123.123.123.123
  remote: %any
  local public key authentication:
    id: CN=123.123.123.123
    certs: CN=123.123.123.123
  remote EAP_RADIUS authentication:
    eap_id: %any
  IKEv2-tunnel: TUNNEL, no rekeying, dpd action is clear
    local:  0.0.0.0/0
    remote: dynamic


Tobias Brunner <[email protected]> писал(а) в своём письме Tue, 14 Jan 2020 17:08:17 +0200:

Hi,

When I'm trying to connect from MacOS 10.15 I get an error:

Apparently, it's still not possible to use DNs as identities with Apple
clients, see [1].

Regards,
Tobias

[1]
https://wiki.strongswan.org/projects/strongswan/wiki/AppleIKEv2Profile#Known-Issues

Reply via email to