Bug #11891
closedstrongSwan configuration contains incorrect structure for mobile pool DNS records
0%
Description
Hello,
according to https://wiki.strongswan.org/projects/strongswan/wiki/Fromipsecconf:
old style configuration
rightdns=<ip>[,…]
should be transformed to the next records:
connections.<conn>.pools=<poolname> pools.<poolname>.dns=<ip>[,…]
but 2.5.1 version config generated in the following way:
pools { } mobile-pool { dns = 10.71.1.11,10.70.3.11 28679 = "20" }
and connection
con-mobile-defaults { ... pools = radius-pool, radius ...
Related issues
Updated by Jim Pingle over 3 years ago
- Status changed from New to In Progress
- Assignee set to Jim Pingle
- Target version set to 2.6.0
"radius" is a special internal pool in strongSwan, which expects settings to be returned from RADIUS and not defined in the configuration.
Though "radius-pool" should be defined to include the settings from "mobile-pool" as a template which would bring in the DNS settings from there, and that seems to not be making it into the config in certain cases.
Updated by Jim Pingle over 3 years ago
- Status changed from In Progress to Feedback
Updated by Jim Pingle over 3 years ago
- Subject changed from swanctl.conf/mobile-pool: incorrect config structure for DNS records to strongSwan configuration contains incorrect structure for mobile pool DNS records
Updating subject for release notes.
Updated by Jim Pingle over 3 years ago
- Plus Target Version changed from 21.05 to 21.09
Reverted RADIUS-specific parts of the change here for now, it was causing the configuration to fail. Can try again before the next release.
Updated by Viktor Gurov over 3 years ago
Jim Pingle wrote in #note-6:
Reverted RADIUS-specific parts of the change here for now, it was causing the configuration to fail. Can try again before the next release.
should be fixed in #11447#note-14
Updated by Jim Pingle over 3 years ago
- Related to Regression #11447: EAP-RADIUS Mobile IPsec clients with RADIUS-assigned addresses do not get additional configuration attributes added
Updated by Jim Pingle over 3 years ago
- Status changed from New to Pull Request Review
Updated by Jim Pingle over 3 years ago
- Status changed from Pull Request Review to Feedback
Referenced PR was merged a few weeks ago.
Updated by Jim Pingle about 3 years ago
- Plus Target Version changed from 21.09 to 22.01
Updated by Jim Pingle almost 3 years ago
- Status changed from Feedback to Resolved