[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] dhcp / ip pool
From:       Andreas Steffen <andreas.steffen () strongswan ! org>
Date:       2008-09-28 22:50:35
Message-ID: 48E00A3B.5020603 () strongswan ! org
[Download RAW message or body]

Hi Tobias,

with the IKEv1 pluto daemon it is possible to request IP addresses
via the proprietary IKEv1 Mode Config protocol extension

  http://tools.ietf.org/html/draft-dukes-ike-mode-cfg-02

but the virtual IP addresses must be defined individually using
rightsourceip= in the ipsec.conf file of the VPN gateway. There
is no pool functionality available.

Regards

Andreas

Tobias Gruber wrote:
> Hello,
> 
> does IKEv1 has a solution to give the client a IP-Adress from an IP-Pool 
> or via DHCP?
> Or is this only in IKEv2 possible.
> 
> In the IKEv2 RFC stands:
> 
>  1) To define the entire IKE protocol in a single document, replacing
>    RFCs 2407, 2408, and 2409 and incorporating subsequent changes to
>    support NAT Traversal, Extensible Authentication, and Remote Address
>    acquisition;
> 
> It sounds like IKEv1 has a soluton for Remote Adress acquistition. In 
> which RFC is this specified?
> 
> Regards
> Tobias

======================================================================
Andreas Steffen                         andreas.steffen@strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org

Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users
[prev in list] [next in list] [prev in thread] [next in thread]