<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Vladimir,</p>
<p>I'm using FreeRadius with EAP-MSCHAPv2 to authenticate Cisco,
Mikrotik, Windows 10 and MacOS clients. Everything works.<br>
</p>
<div class="moz-cite-prefix">On 24.06.2020 14:00, Клеусов Владимир
Сергеевич wrote:<br>
</div>
<blockquote type="cite"
cite="mid:83B9AE98-FE03-42FA-856A-F8BFEF996915@wildberries.ru">
<pre class="moz-quote-pre" wrap="">Hi
Thanks
Does the standard Mac os vpn client work via mschapv2 ? On freeradius I have it disabled and why this is so.
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">24 июня 2020 г., в 12:34, Tobias Brunner <a class="moz-txt-link-rfc2396E" href="mailto:tobias@strongswan.org"><tobias@strongswan.org></a> написал(а):
Hi,
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Is it possible to configure
strongswan with this configuration ?If so why ?
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Yes, strongSwan is not directly involved in the authentication if you
use the eap-radius plugin. The EAP messages are exchanged between
client and RADIUS server, strongSwan only forwards them. So any EAP
method can be used as long as client and RADIUS server can both agree on
one.
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Then the authentication error and the logs of the radius
login incorrect (EAP: no mutually acceptable types)
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Apparently, the client doesn't support the EAP method the RADIUS server
proposes.
Regards,
Tobias
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Volodymyr Litovka
"Vision without Execution is Hallucination." -- Thomas Edison</pre>
</body>
</html>