[strongSwan] ikev1 + freeradius (accounting only)

Martin Willi martin at strongswan.org
Thu Sep 19 17:24:09 CEST 2013


> are you sure eap-radius works with ikev1?

No, you can't use eap-radius for IKEv1 authentication, that makes no
sense. But you can use it for Accounting.

For IKEv1, you may either use

  keyexchange=ikev1
  leftauth=pubkey
  rightauth=pubkey

for certificate authentication without any XAuth at all, or additionally
add

  rightauth2=xauth-noauth

to use the dummy XAuth method. This might be useful if the client
expects XAuth. But if you can disable XAuth on the client, you should
just omit rightauth2.

Regards
Martin





More information about the Users mailing list