Re: [strongSwan] How to handle duplicate client IDs?

2020-10-22 Thread Grischa Stegemann
Am 22.10.20 um 16:21 schrieb Tobias Brunner: No edge case, you have the duplicheck plugin loaded. Read [1] and then disable it because it's only really useful for very specific use cases. [...] [1] https://wiki.strongswan.org/projects/strongswan/wiki/Duplicheck Stupid me. :-/ Already ca

Re: [strongSwan] How to handle duplicate client IDs?

2020-10-22 Thread Tobias Brunner
Hi Grischa, > Is there a way to workaround or decent solution for this edge case? No edge case, you have the duplicheck plugin loaded. Read [1] and then disable it because it's only really useful for very specific use cases. Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/w

Re: [strongSwan] How to handle duplicate client IDs?

2020-10-22 Thread Michael Schwartzkopff
On 22.10.20 16:00, Grischa Stegemann wrote: > Hello All > > We are connecting hardware IP phones with their built-in IPsec client > to our strongSwan server. > The phones can do IKEv2 with PSK plus EAP authentication. > > Everything is working fine until two "road warrior phones" happen do > have t

[strongSwan] How to handle duplicate client IDs?

2020-10-22 Thread Grischa Stegemann
Hello All We are connecting hardware IP phones with their built-in IPsec client to our strongSwan server. The phones can do IKEv2 with PSK plus EAP authentication. Everything is working fine until two "road warrior phones" happen do have the same RFC1918 IPv4 address within their correspondin