[strongSwan] ikev1 + freeradius (accounting only)
Martin Willi
martin at strongswan.org
Thu Sep 19 17:24:09 CEST 2013
> are you sure eap-radius works with ikev1?
No, you can't use eap-radius for IKEv1 authentication, that makes no
sense. But you can use it for Accounting.
For IKEv1, you may either use
keyexchange=ikev1
leftauth=pubkey
rightauth=pubkey
for certificate authentication without any XAuth at all, or additionally
add
rightauth2=xauth-noauth
to use the dummy XAuth method. This might be useful if the client
expects XAuth. But if you can disable XAuth on the client, you should
just omit rightauth2.
Regards
Martin
More information about the Users
mailing list