[Users] dhcp over ipsec

Hello

I have been able to configure ssh sentinel + freeswan with x509 certs. It works fine if I configure manually the IP virtual. I have configured a dhcpd and dhcprelay in freeswan server (same host for both) but if I configure sentinel to get the ip dynamically it doesn't work.

My dhcpd.conf is:

ddns-update-style none;
 class "vpn-clients" {
  match if option agent.circuit-id = "ipsec0";
}

subnet 0.0.0.0 netmask 0.0.0.0 {

        option domain-name "eon.net";
        option routers 192.168.1.254;
        option subnet-mask      255.255.255.0;
        option domain-name-servers      192.168.1.251, 192.168.1.252;
        option netbios-name-servers     192.168.1.251, 192.168.1.252;

        pool {
        allow members of "vpn-clients";
        range 10.2.67.2 10.2.67.254;
        default-lease-time 3600;
        max-lease-time 7200;
        option subnet-mask 255.255.255.0;
        }

}

I run dhcpd this way: dhcpd lo

and dhcprelay this way: dhcrelay ipsec0 lo 127.0.0.1

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

My ipsec.conf is:

conn %default

        keyingtries=1
        disablearrivalcheck=no
        authby=rsasig
        keyexchange=ike
        ikelifetime=240m
        keylife=60m
        pfs=yes
        compress=no
        right=%any
        rightrsasigkey=%cert
        left=80.24.120.xx
        leftcert=certs/myCert.pem
        auto=add
conn dhcp
        type=tunnel
        rekey=no
        ikelifetime=60s
        keylife=20s
        rekeymargin=10s
        right=%any
        leftsubnet=0.0.0.0/0
        leftprotoport=udp/bootps
        rightprotoport=udp/bootpc

conn rw-cert-3des-doi
        type=tunnel
        right=%any
        leftnexthop=80.24.120.yy
        rightsubnetwithin=10.2.67.0/24
        leftsubnet=0.0.0.0/0

any ideas about how to get it working?

Thanks in advances.

Alexandra.