[Openswan Users] Private IP roadwarrior setup.

[Brian Candler]

On Sun, Jun 11, 2006 at 10:10:39PM +0200, Radek Antoniuk wrote:
> >If each roadwarrier always gets the *same* private IP address, though, you
> >might be able to configure it that way.
> >  
> >
> Yes, they should. But on what basis, mac address? And that's the
> problem, how to do it.

You would have to use certificates, in which case the certificate DN
identifies it.

You can't use the IKE identity with PSK, because that would require
Aggressive Mode, which Microsoft IPSEC doesn't support. (Again, other client
software can do this)

Regards,

Brian.