[strongSwan] Yubikey OTP USB Tokens Supported As Authentication Method?

[Martin Willi]

Hi Holger,

> does anybody know of any StrongSWAN setups in which Yubikeys are used 

No, I don't.

> either directly

We currently have no built-in support for OTPs. I don't know how these
Yubikeys work in detail, but shouldn't be too hard to implement it for
IKEv2 wrappend in EAP-OTP/GTC.

>  or indirectly (via a RADIUS server)

Our IKEv2 RADIUS backend can use any EAP method transparently for user
authentication. I don't know if there is a RADIUS server supporting
Yubikey-over-EAP, though.

Regards
Martin