[strongSwan] Is eap_identity configuration supported?

Martin Willi martin at strongswan.org
Thu Feb 24 17:04:59 CET 2011


> * the server is expected to ask the client for its EAP identity:

To initiate an EAP-Identity exchange before starting with the real EAP
method, set
   eap_identity=%identity
on the server. A client will respond with the identity configured with
   eap_identity=0111222333444555

> 13[IKE] EAP-Identity request configured, but not supported

Requesting the EAP-Identity this way requires an additional module,
--enable-eap-identity while doing ./configure. 

Another option is to let the RADIUS server do the EAP-Identity exchange.
This can be done by sending an EAP-Start to RADIUS, but not all servers
like it. Have a look at [1] for details.

Regards
Martin

[1]http://wiki.strongswan.org/projects/strongswan/wiki/EapRadius#Identity-exchange





More information about the Users mailing list