[strongSwan] none allows XAuthInitPSK authentication using Main Mode

Martin Willi martin at strongswan.org
Fri Oct 31 15:18:33 CET 2014


Hi,

>     rightauth=psk
>     rightauth2=xauth

> But After I change the "xauth" to "eap-radius" [...]

eap-radius is an EAP authentication method and works for IKEv2
connections, only. The eap-radius plugin provides an XAuth
authentication backend using RADIUS as well, but you'll need to set
rightauth2 to xauth-radius; there is no EAP involved in IKEv1. Refer to
[1] for details.

Regards
Martin

[1]https://wiki.strongswan.org/projects/strongswan/wiki/EapRadius#XAuth



More information about the Users mailing list