-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Martin,
Yes, I tried that. However, if I do that, /etc/resolv.conf only contains the comment in the first line. Regards, Noel Kuntze GPG Key id: 0x63EC6658 Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658 Am 14.08.2014 um 10:58 schrieb Martin Willi: > Noel, > >> upon disconnecting the tunnel (swanctl -t --child tunnel) the content >> of /etc/resolv.conf isn't restored to the content there was before. > > With that command, usually only the CHILD_SA gets closed, but not the > IKE_SA. IP address, DNS configuration and other attributes are bound to > the lifetime of the IKE_SA in IKEv2, and not to the CHILD_SA. > > Have you tried to terminate the connection with the --ike option? > > Regards > Martin > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBAgAGBQJT7Hv9AAoJEDg5KY9j7GZYJNAP/1agpRYkK7rIgbuF0fnQi1VC 4oGyBDR6o/8c3xY3dhBlNqLhRHo3LX9/L3MUjrXZJrEn7odlqr5wOI0MO12rR/Kv fr9QDA2DrEbFTY1WR0292sN5y5SCVd2VzHd/mSB4cs+aKjwts+fgnPDJAFMf9IDZ +ADbsoFnt2I+nX58QEj/zF/jMVb+GMAI1LMin2sWIil1GciWW44tRacwNbPDGc8V 0pKaSx50CDh0XDR+4dv/Mud1j+65G68bUCbvj5aKfPe4ij9w9dYNz1zW9TkOFilx Mkm6m066sCE5Pz/1LG9He4M1Sp5pcyncR03JHkpDs0K6hMtASt4ebdoY+tnTN8Qt agpjPS3IiMFvPDriwsdIikZ6ERAlH9NC9usDROWO/6hQT+LaJRPqpL/jUuinfam+ m6yy9c8MO3a0FSo5dJ0kC9WG4rTMcYoXXSFKQG764IrZ78W2W0HhbNvERSJzQS7b rC6oes/H0k0yC4+6p/PgTnaI5zsSUXIzdmAMWcAArU1M+J7+ClQmvrMpjzkLFuSj 3CZCF49IQI0P8lHUJSwMQut2/cG1uJ+5qqGmb6GNZXmgMPcgwbX0YTXVQiImoAO0 Adu6VT0TG+8a5T2BUz/bjVM6RbcCvowmXBFPum/aXB811hIdlYblonDC8jD+Yt19 55EkqlqrGcVqaulWfxLv =dFyd -----END PGP SIGNATURE----- _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users