[Swan] Assign static ip to l2tp users

[Paul Wouters]

On Wed, 24 Jan 2018, ehsan rasta wrote:

> I installed libreswan in my centos 7 successfully and it works fine
> I need to assign static defined IP address to my l2tp users
> I was wondering if you could please explain me How can I define something like arp table or define ip for each user account in config file

If you are doing L2TP/IPsec, either the xl2tpd daemon or pppd will
determine the address. xl2tpd can only use a pool via "ip range ="
and it will just pick an IP and pass it as option to pppd.

But with pppd you can have many options that can go up the chain.
It can either be part of chap-secrets or a radius pppd plugin etc.

So the simple case would be to use:

user1       *	       "password1"     192.168.1.101

This is documented at:

https://libreswan.org/wiki/VPN_server_for_remote_clients_using_IKEv1_with_L2TP

Paul