[Openswan Users] Openswan Linux Client to SonicWallWindows Server.

[Paul Wouters]

On Thu, 28 Sep 2006, Rob Moore wrote:

> Thanks, Fernando. I have but we're not using xauth so I ignored it. I
> think our GroupVPN name has a space in it so I thought it would be
> unusable for an ID. I'll try it and see what happens.
>
> Do you happen to know if there is anything special I have to do to get
> the DHCP part of the equation working? I've seen lines like:
>
> leftprotoport=udp/bootps
> leftsubnet=0.0.0.0/0  #allows DHCP discovery broadcast

openswan cannot do dhcp over ipsec. There is one RFC no one implemented,
and some other incompatible/proprietary stuff. IKEv2 solves this, but
for now if you want to do dynamically assigned IP, use something like
L2TP with IPsec.

Paul