[strongSwan] Is eap_identity configuration supported?

Christophe Gouault christophe.gouault at 6wind.com
Thu Feb 24 17:16:56 CET 2011


Hi Martin,

Martin Willi wrote:
>> * the server is expected to ask the client for its EAP identity:
>>     
>
> To initiate an EAP-Identity exchange before starting with the real EAP
> method, set
>    eap_identity=%identity
> on the server. A client will respond with the identity configured with
>    eap_identity=0111222333444555
>   
>> 13[IKE] EAP-Identity request configured, but not supported
>>     
>
> Requesting the EAP-Identity this way requires an additional module,
> --enable-eap-identity while doing ./configure.
>   
Thank you, I'll try this solution.
Indeed, I did not compile this module.
> Another option is to let the RADIUS server do the EAP-Identity exchange.
> This can be done by sending an EAP-Start to RADIUS, but not all servers
> like it. Have a look at [1] for details.
>
> Regards
> Martin
>
> [1]http://wiki.strongswan.org/projects/strongswan/wiki/EapRadius#Identity-exchange
>   
Regards,
Christophe.




More information about the Users mailing list