[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] Clients with the same local IP cannot connect successfully at the same time
From:       Noel Kuntze <noel.kuntze+strongswan-users-ml () thermi ! consulting>
Date:       2020-02-03 12:02:49
Message-ID: 484d2fdd-534d-790b-720b-90a4e716dfdf () thermi ! consulting
[Download RAW message or body]

[Attachment #2 (multipart/mixed)]


Hello,

Use EAP and do an EAP IDENTITY exchange. Then you get user IDs as identities.

Kind regards

Noel

Am 02.02.20 um 18:30 schrieb 佛来佛网:
> hi all :
> 
> I set up       strongswan ---freeradius ---winbind -----MS AD
>  
> the clients is Windows  built-in  vpn client.
>  
> I use   strongswan status all | grep 192.168.1
>  
> display this
> +++++++++++++
>    IKEv2-EAP[80]: ESTABLISHED 3 minutes ago, \
> 192.168.4.14[vpns.mydomain.com]...10.98.8.1[192.168.1.8]    IKEv2-EAP[65]: \
> ESTABLISHED 26 minutes ago, \
> 192.168.4.14[vpns.mydomain.com]...10.98.8.1[192.168.1.16]    IKEv2-EAP[36]: \
> ESTABLISHED 36 minutes ago, \
> 192.168.4.14[vpns.mydomain.com]...10.98.8.1[192.168.1.7] +++++++++++++
>  
> if  two  clients  have  same  local ip    for example  \
> 192.168.1.7     ,  the last 192.168.1.7 can not  connect \
> successfully.  
> how can I   change  the   remote id  of clients  .  or any \
> other  way to  solve  this  .  
> thanks so much.
>  


["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]