Roaming host configuration

diff --git a/libreswan/etc/ipsec.d/roaming-host-domain.conf.template b/libreswan/etc/ipsec.d/roaming-host-domain.conf.template
new file mode 100644 (file)
index 0000000..1880dff
--- /dev/null
+++ b/libreswan/etc/ipsec.d/roaming-host-domain.conf.template
@@ -0,0 +1,4 @@
+conn roaming-host-domain
+       leftsubnet=fdfd:dead:beef::/48
+       modecfgdomains="in.example.org f.e.e.b.d.a.e.d.d.f.d.f.ip6.arpa"
+       #modecfgdomains="."

diff --git a/libreswan/etc/ipsec.d/roaming-host.conf b/libreswan/etc/ipsec.d/roaming-host.conf
new file mode 100644 (file)
index 0000000..57631be
--- /dev/null
+++ b/libreswan/etc/ipsec.d/roaming-host.conf
@@ -0,0 +1,21 @@
+conn roaming-host-ipv6
+       also=roaming-host-common
+       hostaddrfamily=ipv6
+
+conn roaming-host-ipv4
+       also=roaming-host-common
+       hostaddrfamily=ipv4
+       # Required so that client is considered IPv6:
+       rightsubnet=::/0
+       ipsec-interface=yes
+       leftupdown="/usr/libexec/ipsec/_updown.host4client6"
+
+conn roaming-host-common 
+       also=roaming-host-domain
+       # Authorisation
+       authby=rsa-sha2
+       leftid=%fromcert
+       rightid=%fromcert
+       # Networking
+       clientaddrfamily=ipv6
+       right=%any

diff --git a/libreswan/etc/ipsec.d/roaming.conf b/libreswan/etc/ipsec.d/roaming.conf
index b18969c75c9bf8221b33354cc65067342d611c3d..6bf61fd655bd4e689c9f5de1674d3f9b78a89c01 100644 (file)
--- a/libreswan/etc/ipsec.d/roaming.conf
+++ b/libreswan/etc/ipsec.d/roaming.conf
@@ -1,15 +1,13 @@
 # Generic roaming configurations
 conn roaming-ipv6
-       hostaddrfamily=ipv6
        also=roaming-common
-
+       hostaddrfamily=ipv6
        ipsec-interface=yes
 
 conn roaming-ipv4
-       hostaddrfamily=ipv4
        also=roaming-common
-
-       # Required so that client is considered IPv6
+       hostaddrfamily=ipv4
+       # Required so that client is considered IPv6:
        leftsubnet=::0/0
        ipsec-interface=yes
        leftupdown="/usr/libexec/ipsec/_updown.host4client6"
@@ -20,7 +18,6 @@ conn roaming-common
        leftid=%fromcert
        rightid=%fromcert
        leftcert=ipa-client
-
        # Networking
        left=%defaultroute
        clientaddrfamily=ipv6