[strongSwan] Strongswan+RADIUS secret code problem?

[T Z]

Hi Julian,

Thanks for the reply. I changed the default eap type to mschapv2 but the problem persists. Do you
mind to post your strongswan.conf and ipsec.conf so I can make sure it's not a strongswan but a 
freeradius problem? Thank you.

> Date: Fri, 28 Oct 2011 17:10:36 +0200
> From: julian.poschmann at rwth-aachen.de
> To: users at lists.strongswan.org
> Subject: Re: [strongSwan] Strongswan+RADIUS secret code problem?
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi,
> 
> I have similar setup, here two caveeats I had:
> 
> 1) Windows 7 was not happy with the eap-type the radius server
> suggested and quit with error 13801. I had to set "default_eap_type =
> mschapv2" in eap.conf. I think Windows 7 only supports eap-mschapv2
> for it's ikev2 client. Maybe there is a more elegant way than changing
> the default eap type. I haven't looked further into it.
> 
> 2) There have been license issue with openssl in freedradius under
> debian/ubuntu resulting in the repo version being compiled with very
> limited functionality. Although it shouldn't have an impact on
> eap-mschapv2 (I think), maybe it's worth a try compiling freefradius
> yourself.
> 
> Regards,
>   Julian
> 
> Am 28.10.2011 06:37, schrieb T Z:
> > Hi all,
> > 
> > I'm using Strongswan 4.5.2 (from Debian squeeze-backports) and 
> > Freeradius 2.1.0 (from Debian stable) to construct an IKEv2 VPN for
> > my clients. It seems that Strongswan is connected with Freeradius,
> > but client connection just fails. Testing with Windows 7 IKEv2
> > client, it prompts "Error 13801: IKE authentication credentials are
> > unacceptable."
> 
> - -- 
> Julian Poschmann
> Josefstr. 126
> 52080 Aachen-Eilendorf
> 
> Telefon: +49 170 3295135
> E-Mail: julian.poschmannn at rwth-aachen.de
> PGP-ID: 0x7D51DD8B
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.17 (MingW32)
> 
> iEYEARECAAYFAk6qxewACgkQJmSm8H1R3YtLhwCfWyuSXztlTxVFRfOMhLYgW4cz
> sjgAn31r+lBORw7Z3P38ZWNn2gtFtoAh
> =Vytf
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20111028/9cf0f564/attachment.html>