[prev in list] [next in list] [prev in thread] [next in thread]
List: strongswan-announce
Subject: Re: [strongSwan-dev] Query about ikev2/dhcp-static-mac
From: Fan Du <fan.du () windriver ! com>
Date: 2014-04-02 8:59:56
Message-ID: 533BD1FA.9090108 () windriver ! com
[Download RAW message or body]
On 2014年04月02日 16:56, Martin Willi wrote:
>> > If I want to add another host, i.e., Tina along with Dave, who also
>> > need a static mac address in DHCP server configuration, how does this
>> > static mac address come out in the first place before any IKE contact?
> The idea is not to pre-configure your DHCP server with these static MAC
> addresses, but just to have persistent IP leases for each identity. We
> do it in the test cases just for reproducibility.
>
>> > I read the code, chunk_mac_inc performs SipHash-2-4 when IKE contact
>> > actually happens.
> Of course you can write a tool that generates the MAC from the identity
> using the same algorithm, but this is probably more complicated than
> required.
>
>> > Yes, dhcp-static-client-id test is quite straight forward.
> If your DHCP server can handle it, you really should go for that
> dhcp-client-identity option to pre-define IPs for identities.
Yep, that's way to go in production.
Thanks for your information! Martin
--
浮沉随浪只记今朝笑
--fan
_______________________________________________
Dev mailing list
Dev@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/dev
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic