[strongSwan] Is eap_identity configuration supported?
Christophe Gouault
christophe.gouault at 6wind.com
Thu Feb 24 17:16:56 CET 2011
Hi Martin,
Martin Willi wrote:
>> * the server is expected to ask the client for its EAP identity:
>>
>
> To initiate an EAP-Identity exchange before starting with the real EAP
> method, set
> eap_identity=%identity
> on the server. A client will respond with the identity configured with
> eap_identity=0111222333444555
>
>> 13[IKE] EAP-Identity request configured, but not supported
>>
>
> Requesting the EAP-Identity this way requires an additional module,
> --enable-eap-identity while doing ./configure.
>
Thank you, I'll try this solution.
Indeed, I did not compile this module.
> Another option is to let the RADIUS server do the EAP-Identity exchange.
> This can be done by sending an EAP-Start to RADIUS, but not all servers
> like it. Have a look at [1] for details.
>
> Regards
> Martin
>
> [1]http://wiki.strongswan.org/projects/strongswan/wiki/EapRadius#Identity-exchange
>
Regards,
Christophe.
More information about the Users
mailing list