<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=gb2312"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:ËÎÌå;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@ËÎÌå";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
text-align:justify;
text-justify:inter-ideograph;
font-size:10.5pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.web-item2
{mso-style-name:web-item2;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=ZH-CN link="#0563C1" vlink="#954F72" style='text-justify-trim:punctuation'><div class=WordSection1><p class=MsoNormal align=left style='text-align:left'><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Hello:<o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US>I am<o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US>INSTALL<o:p></o:p></span></b></p><p class=MsoNormal><span lang=EN-US>./configure ¡¡ - --enable-eap-identity --enable-eap-mschapv2 --enable-eap-peap --enable-eap-radius ¡¡.. && make && make instll<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Strongswan.conf:<o:p></o:p></span></b></p><p class=MsoNormal><span lang=EN-US>Charon{<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> Load = ¡¡.. eap-identity eap-mschapv2 eap-radius eap-peap ¡¡..<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> ¡¡¡<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> }<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>Ipsec.conf:<o:p></o:p></span></b></p><p class=MsoNormal><span lang=EN-US>.rightauth=eap-peap<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US>LOG:<o:p></o:p></span></b></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:12 gateway charon: 13[CFG] received stroke: delete connection 'rw-EAP-MSchapv2'<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:12 gateway charon: 13[CFG] deleted connection 'rw-EAP-MSchapv2'<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:12 gateway charon: 15[CFG] received stroke: add connection 'rw-eap'<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:12 gateway charon: 15[CFG] loaded certificate "C=CN, O=eco-schulte, CN=gw-a.***.cn" from 'gw-aCert.pem'<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:12 gateway charon: 15[CFG] added configuration 'rw-eap'<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 05[NET] received packet: from 183.*.*.*[500] to 59.*.*.*[500] (792 bytes)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 05[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 05[IKE] 183.*.*.* is initiating an IKE_SA<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 05[IKE] remote host is behind NAT<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 05[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 05[NET] sending packet: from 59.*.*.*[500] to 183.*.*.*[500] (308 bytes)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[NET] received packet: from 183.*.*.*[4500] to 59.*.*.*[4500] (724 bytes)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[ENC] parsed IKE_AUTH request 1 [ IDi CERTREQ N(MOBIKE_SUP) CP(ADDR DNS NBNS SRV) SA TSi TSr ]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[IKE] received cert request for "C=CN, O=***, CN=*** ca"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[IKE] received 20 cert requests for an unknown ca<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[CFG] looking for peer configs matching 59.*.*.*[%any]...183.*.*.*[192.168.1.3]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[CFG] selected peer config 'rw-eap'<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[IKE] initiating EAP_IDENTITY method (id 0x00)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[IKE] peer supports MOBIKE<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[IKE] authentication of 'gw-a.***.cn' (myself) with RSA signature successful<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[IKE] sending end entity cert "C=CN, O=eco-schulte, CN=gw-a.***.cn"<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[ENC] generating IKE_AUTH response 1 [ IDr CERT AUTH EAP/REQ/ID ]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 06[NET] sending packet: from 59.*.*.*[4500] to 183.*.*.*[4500] (1220 bytes)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 07[NET] received packet: from 183.*.*.*[4500] to 59.*.*.*[4500] (68 bytes)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 07[ENC] parsed IKE_AUTH request 2 [ EAP/RES/ID ]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 07[IKE] received EAP identity 'peer'<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 07[IKE]<b><span style='color:red'> loading EAP_MSCHAPV2 method failed</span></b><span style='color:red'><o:p></o:p></span></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 07[ENC] generating IKE_AUTH response 2 [ EAP/FAIL ]<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>Dec 20 22:06:45 gateway charon: 07[NET] sending packet: from 59.*.*.*[4500] to 183.*.*.*[4500] (68 bytes)<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span lang=EN-US style='color:#1F497D'>If<o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US>Ipsec.conf:<o:p></o:p></span></b></p><p class=MsoNormal><span lang=EN-US>rightauth=eap-radius<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>else:<o:p></o:p></span></p><p class=MsoNormal><b><span lang=EN-US>LOG:<o:p></o:p></span></b></p><p class=MsoNormal><b><span lang=EN-US style='color:red'>oading EAP_RADIUS method failed</span></b><span lang=EN-US style='color:red'><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US style='color:#1F497D'><o:p> </o:p></span></p></div></body></html>