<html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office"><head><!--[if gte mso 9]><xml><o:OfficeDocumentSettings><o:AllowPNG/><o:PixelsPerInch>96</o:PixelsPerInch></o:OfficeDocumentSettings></xml><![endif]--></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12px"><div id="yui_3_16_0_ym19_1_1484198251454_8248">Hello,</div><div id="yui_3_16_0_ym19_1_1484198251454_8248"><br></div><div id="yui_3_16_0_ym19_1_1484198251454_8248" dir="ltr">I am trying to setup a strongSwan TNC Server as shown this this guide with the eap-ttls - <a href="https://wiki.strongswan.org/projects/strongswan/wiki/TNCS">https://wiki.strongswan.org/projects/strongswan/wiki/TNCS</a></div><div id="yui_3_16_0_ym19_1_1484198251454_11579"><br></div><div id="yui_3_16_0_ym19_1_1484198251454_8248" dir="ltr"><br></div><div id="yui_3_16_0_ym19_1_1484198251454_8248" dir="ltr">When my Android client connected to the server it fails and I see this in the strongswan.log;</div><div id="yui_3_16_0_ym19_1_1484198251454_8247"><br></div><div id="yui_3_16_0_ym19_1_1484198251454_8232">11[IKE] authentication of 'carol@strongswan.org' with EAP successful</div><div id="yui_3_16_0_ym19_1_1484198251454_8233">11[CFG] constraint check failed: group membership to 'allow' required</div><div id="yui_3_16_0_ym19_1_1484198251454_8234">11[CFG] selected peer config 'rw-allow' inacceptable: non-matching authentication done</div><div id="yui_3_16_0_ym19_1_1484198251454_8235">11[CFG] switching to peer config 'rw-isolate'</div><div id="yui_3_16_0_ym19_1_1484198251454_8236">11[CFG] constraint check failed: group membership to 'isolate' required</div><div id="yui_3_16_0_ym19_1_1484198251454_8237">11[CFG] selected peer config 'rw-isolate' inacceptable: non-matching authentication done</div><div id="yui_3_16_0_ym19_1_1484198251454_8238">11[CFG] no alternative config found</div><div id="yui_3_16_0_ym19_1_1484198251454_8239">11[ENC] added payload of type NOTIFY to message</div><div id="yui_3_16_0_ym19_1_1484198251454_8240">11[ENC] order payloads in message</div><div id="yui_3_16_0_ym19_1_1484198251454_8241">11[ENC] added payload of type NOTIFY to message</div><div id="yui_3_16_0_ym19_1_1484198251454_8242">11[ENC] generating IKE_AUTH response 7 [ N(AUTH_FAILED) ]</div><div id="yui_3_16_0_ym19_1_1484198251454_8243">11[ENC] insert payload NOTIFY into encrypted payload</div><div id="yui_3_16_0_ym19_1_1484198251454_8244">11[ENC] generating payload of type HEADER</div><div dir="ltr" id="yui_3_16_0_ym19_1_1484198251454_8245"><br id="yui_3_16_0_ym19_1_1484198251454_8246"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1484198251454_8245"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1484198251454_8245">How do I resolve this?</div><div dir="ltr" id="yui_3_16_0_ym19_1_1484198251454_8245"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1484198251454_8245">Thanks,</div><div dir="ltr" id="yui_3_16_0_ym19_1_1484198251454_8245"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1484198251454_8245">Mark</div></div></body></html>