[Openswan Users] dhcp over ipsec

[Nate Carlson]

On Fri, 14 May 2004, Radu  Brumariu wrote:
> I am setting up a VPN gateway and I am trying to assign to the
> connection clients an IP from the internal net ( which is a public IP )
> from a DHCP address pool.  I have setup the dhcpd server to listen on lo
> and the dhcrelay to relay ipsec0 to lo . I can see the DHCPDISCOVER
> packets and the DHCPOFFEr packets, but there is no DHCPREQUEST / DHCPACK
> packets following.
> 
> The DHCP server is allocating IPs in the range 131.123.35.155-160 /
> 255.255.255.0
> 
> I am using SSH Sentinel 1.3.2 , openswan 2.1.2.rc3 and certificates. One
> more thing : If I don't specify that I want a DHCP address , I can
> create the tunnel ...

Radu,

I'm afraid it's been ages since I've tried DHCP over IPSec; not positive 
what's necessary on Openswan for it.  :(

But just out of curiosity, is there any reason you're using SSH Sentinel 
with DHCP over IPSec instead of L2TP over IPSec with the Microsoft client?

------------------------------------------------------------------------
| nate carlson | natecars at natecarlson.com | http://www.natecarlson.com |
|       depriving some poor village of its idiot since 1981            |
------------------------------------------------------------------------