<html><body><div style="font-family: lucida console,sans-serif; font-size: 12pt; color: #000000"><div>Hello Everyone,</div><div>I am trying configure ikev2 for IOS devices with eap-gtc. But authentication failing no matter what and in /var/log/secure I see </div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div><ol style="color: rgb(0, 0, 0); font-family: "Liberation Sans", "Lucida Grande", "Luxi Sans", "Bitstream Vera Sans", helvetica, verdana, arial, sans-serif; font-size: 12px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);" data-mce-style="color: #000000; font-family: 'Liberation Sans', 'Lucida Grande', 'Luxi Sans', 'Bitstream Vera Sans', helvetica, verdana, arial, sans-serif; font-size: 12px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: #ffffff;"><li style="font-weight: normal; vertical-align: top;" data-mce-style="font-weight: normal; vertical-align: top;"><div style="font-style: normal; font-variant: normal; font-weight: normal; font-stretch: normal; font-size: 1em; line-height: 1.2em; font-family: monospace; margin: 0px; padding: 0px; background: none; vertical-align: top;" data-mce-style="font-style: normal; font-variant: normal; font-weight: normal; font-stretch: normal; font-size: 1em; line-height: 1.2em; font-family: monospace; margin: 0px; padding: 0px; background: none; vertical-align: top;">Sep 25 16:21:55 vpn00 charon: pam_console(login:session): getpwnam failed for %any</div></li><li style="font-weight: normal; vertical-align: top;" data-mce-style="font-weight: normal; vertical-align: top;"><div style="font-style: normal; font-variant: normal; font-weight: normal; font-stretch: normal; font-size: 1em; line-height: 1.2em; font-family: monospace; margin: 0px; padding: 0px; background: none; vertical-align: top;" data-mce-style="font-style: normal; font-variant: normal; font-weight: normal; font-stretch: normal; font-size: 1em; line-height: 1.2em; font-family: monospace; margin: 0px; padding: 0px; background: none; vertical-align: top;">Sep 25 16:21:55 vpn00 charon: pam_unix(login:session): session closed for user %any</div></li><li style="font-weight: normal; vertical-align: top;" data-mce-style="font-weight: normal; vertical-align: top;"><div style="font-style: normal; font-variant: normal; font-weight: normal; font-stretch: normal; font-size: 1em; line-height: 1.2em; font-family: monospace; margin: 0px; padding: 0px; background: none; vertical-align: top;" data-mce-style="font-style: normal; font-variant: normal; font-weight: normal; font-stretch: normal; font-size: 1em; line-height: 1.2em; font-family: monospace; margin: 0px; padding: 0px; background: none; vertical-align: top;">Sep 25 16:21:55 vpn00 charon: pam_console(login:session): getpwnam failed for client1</div></li><li style="font-weight: normal; vertical-align: top;" data-mce-style="font-weight: normal; vertical-align: top;"><div style="font-style: normal; font-variant: normal; font-weight: normal; font-stretch: normal; font-size: 1em; line-height: 1.2em; font-family: monospace; margin: 0px; padding: 0px; background: none; vertical-align: top;" data-mce-style="font-style: normal; font-variant: normal; font-weight: normal; font-stretch: normal; font-size: 1em; line-height: 1.2em; font-family: monospace; margin: 0px; padding: 0px; background: none; vertical-align: top;">Sep 25 16:21:55 vpn00 charon: pam_unix(login:session): session closed for user client1</div></li></ol><div><br data-mce-bogus="1"></div><div>Where charon send request to pam for valid user and user %any.</div><div>And connection failing. </div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Sep 26 14:33:19 11[ENC] <clientrw00|4> parsed IKE_AUTH request 2 [ EAP/RES/ID ]<br>Sep 26 14:33:19 11[IKE] <clientrw00|4> received EAP identity 'client1'<br>Sep 26 14:33:19 11[IKE] <clientrw00|4> initiating EAP_GTC method (id 0x7D)<br>Sep 26 14:33:19 11[ENC] <clientrw00|4> generating IKE_AUTH response 2 [ EAP/REQ/GTC ]<br>Sep 26 14:33:19 11[NET] <clientrw00|4> sending packet: from 172.16.1.5[4500] to mypubip[4500] (92 bytes)<br>Sep 26 14:33:19 16[NET] <clientrw00|4> received packet: from mypubip[4500] to 172.16.1.5[4500] (76 bytes)<br>Sep 26 14:33:19 16[ENC] <clientrw00|4> parsed IKE_AUTH request 3 [ EAP/RES/NAK ]<br>Sep 26 14:33:19 16[IKE] <clientrw00|4> received EAP_NAK, sending EAP_FAILURE<br>Sep 26 14:33:19 16[ENC] <clientrw00|4> generating IKE_AUTH response 3 [ EAP/FAIL ]<br>Sep 26 14:33:19 16[NET] <clientrw00|4> sending packet: from 172.16.1.5[4500] to mypubip[4500] (76 bytes)</div><div><br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Same setup with mschapv2 works fine.</div><div><br data-mce-bogus="1"></div><div>Any help thank you.</div></div></div></body></html>