Bug #11891
closed
strongSwan configuration contains incorrect structure for mobile pool DNS records
Added by Oleksandr Yermolenko over 3 years ago.
Updated almost 3 years ago.
Plus Target Version:
22.01
Affected Architecture:
amd64
Description
Hello,
according to https://wiki.strongswan.org/projects/strongswan/wiki/Fromipsecconf:
old style configuration
rightdns=<ip>[,…]
should be transformed to the next records:
connections.<conn>.pools=<poolname>
pools.<poolname>.dns=<ip>[,…]
but 2.5.1 version config generated in the following way:
pools {
}
mobile-pool {
dns = 10.71.1.11,10.70.3.11
28679 = "20"
}
and connection
con-mobile-defaults {
...
pools = radius-pool, radius
...
- Status changed from New to In Progress
- Assignee set to Jim Pingle
- Target version set to 2.6.0
"radius" is a special internal pool in strongSwan, which expects settings to be returned from RADIUS and not defined in the configuration.
Though "radius-pool" should be defined to include the settings from "mobile-pool" as a template which would bring in the DNS settings from there, and that seems to not be making it into the config in certain cases.
- Status changed from In Progress to Feedback
- Plus Target Version set to 21.05
- Subject changed from swanctl.conf/mobile-pool: incorrect config structure for DNS records to strongSwan configuration contains incorrect structure for mobile pool DNS records
Updating subject for release notes.
- Plus Target Version changed from 21.05 to 21.09
Reverted RADIUS-specific parts of the change here for now, it was causing the configuration to fail. Can try again before the next release.
- Status changed from Feedback to New
Jim Pingle wrote in #note-6:
Reverted RADIUS-specific parts of the change here for now, it was causing the configuration to fail. Can try again before the next release.
should be fixed in #11447#note-14
- Related to Regression #11447: EAP-RADIUS Mobile IPsec clients with RADIUS-assigned addresses do not get additional configuration attributes added
- Status changed from New to Pull Request Review
- Status changed from Pull Request Review to Feedback
Referenced PR was merged a few weeks ago.
- Plus Target Version changed from 21.09 to 22.01
- Status changed from Feedback to Resolved
Also available in: Atom
PDF
Updated by 
Updated by Viktor Gurov