Project

General

Profile

Feature #8160

Accomodate both RADIUS and pool IP addresses in IPsec

Added by Chris Linstruth over 2 years ago. Updated 21 days ago.

Status:
Feedback
Priority:
Normal
Category:
IPsec
Target version:
Start date:
12/04/2017
Due date:
% Done:

100%

Estimated time:

Description

Strongswan now allows multiple dynamic address pools in mobile IPsec.

I was able to coerce it to work by forcing eap-radius to load earlier by placing load = 255 in /usr/local/etc/strongswan.d/charon/eap-radius.conf causing that plugin to load earlier.

I also manually placed rightsourceip = %radius,172.25.25.0/24 in /var/etc/ipsec/ipsec.conf in the mobile IPsec connection.

After manually stopping and starting ipsec the Framed-IP-Address attribute was honored if present. If not, the 172.25.25.0/24 pool was used.

Associated revisions

Revision f9c9899b (diff)
Added by Viktor Gurov about 1 month ago

Accomodate both RADIUS and pool IP addresses in IPsec. Issue #8160

Revision bd46a6c0 (diff)
Added by Viktor Gurov 24 days ago

IPsec mobile page minor fixes. Issue #8160

History

#1 Updated by Jim Pingle about 2 years ago

  • Target version changed from 2.4.3 to 2.4.4

#2 Updated by Steve Beaver over 1 year ago

  • Target version changed from 2.4.4 to 48

#4 Updated by Jim Pingle about 1 year ago

  • Target version changed from 48 to 2.5.0

#5 Updated by Jim Pingle 7 months ago

  • Status changed from New to Pull Request Review

#6 Updated by Renato Botelho about 1 month ago

  • Status changed from Pull Request Review to New

PR has been closed due to inactivity

#7 Updated by Viktor Gurov about 1 month ago

resolved with some extra bugfixes:
https://github.com/pfsense/pfsense/pull/4194

#8 Updated by Jim Pingle about 1 month ago

  • Status changed from New to Pull Request Review

#9 Updated by Renato Botelho about 1 month ago

  • Status changed from Pull Request Review to Feedback
  • Assignee set to Renato Botelho
  • % Done changed from 0 to 100

PR has been merged. Thanks!

#10 Updated by Viktor Gurov 24 days ago

works as expected on 2.5.0.a.20200305.2255

but some minor fixes:
https://github.com/pfsense/pfsense/pull/4219

#11 Updated by Jim Pingle 23 days ago

  • Status changed from Feedback to Pull Request Review

#12 Updated by Renato Botelho 21 days ago

  • Status changed from Pull Request Review to Feedback

PR has been merged. Thanks!

Also available in: Atom PDF