Hi Michael, > Is there a way to specify in Strongswan 5.0.1 an authentication > combination of xauth-pam and rsa? Yes, see [1]. You can authenticate the client with RSA first using rightauth=pubkey, and then XAuth using rightauth2=xauth-pam. Regards Martin [1]http://wiki.strongswan.org/projects/strongswan/wiki/XAuthPAM