Project

General

Profile

Issue #3609

Potential DNS server IP address conflicts

Added by Tom Hsiung almost 5 years ago. Updated almost 5 years ago.

Status:
Feedback
Priority:
Normal
Assignee:
-
Category:
configuration
Affected version:
5.6.2
Resolution:

Description

I have configure the DNS server address in strongswan.conf file by

# strongswan.conf - strongSwan configuration file
#
# Refer to the strongswan.conf(5) manpage for details
#
# Configuration changes should be made in the included files

charon {
        load_modular = yes
        dns1 = x.x.x.x
        dns2 = 8.8.8.8
        plugins {
                include strongswan.d/charon/*.conf
        }
}

include strongswan.d/*.conf

Now I plan to configure virtual IP assigned to roadwarrior clients via dhcp plugin. In addition, my DHCP server has specified DNS servers but they are different from those DNS server used by roadwarrior clients. So how to figure out the probable conflicts? Thank you.

Tom

History

#1 Updated by Tobias Brunner almost 5 years ago

  • Category set to configuration
  • Status changed from New to Feedback

So how to figure out the probable conflicts?

The dhcp plugin currently has no option to ignore DNS servers. So make sure that none are sent by the DHCP server or that the VPN clients can use them (note that all available DNS servers, from any plugin, will be sent to the clients).