[strongSwan] Combining authentication types

Noel Kuntze noel at familie-kuntze.de
Fri Jun 26 14:08:07 CEST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Fred,

Just create several conn sections.

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 26.06.2015 um 11:41 schrieb Fred:
> Hi all,
>
> In the very clear and well written StrongSwan wiki there is a section on setting up Windows 7 and newer (https://wiki.strongswan.org/projects/strongswan/wiki/Windows7).
>
> Detailed are various authentication scenarios: 'Authentication using X.509 Machine Certificates',  Authentication using X.509 User Certificates, and Authentication using EAP-MSCHAP v2.
>
> I have gotten these to work all individually by following the instructions.
>
> But, is it possible to have a configuration on the server where client certificates OR MSCHAPv2 are acceptable ? And to complicate things further, also be able to support the StrongSwan Mac OX Client (is this just 'Authentication using EAP-MSCHAP v2' or slightly different) ?
>
> Ideally I'd like to be able to connect from Windows (using certs or mschapv2) OR Mac OS X.
>
> Fred
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJVjUCkAAoJEDg5KY9j7GZYi44QAJhl13TVsVRvabOsvz/nlMsa
YEFfKmMb1Bhza7O1zn0EGMZ8Sr6J/5w74rfEmKtKUVE+hdH4PV0Rmkyn46xOX8D0
aK6rSMDzdzFQRLZLYyJL71k80eRUYCRPL8gUdktFYh8Q6NYwkGYNF9FJa2+QGssa
qiRATWS7Ar8s7x5nD7NrQP0cin69uxt2fBRdKSi6WjspQKDX/p+9BAdwMwmyqlwA
XqyiLNxTzq0qpYyjwvU88P8Ibq0qlGYxPnjF3V5aSUypYMsMSnAeOAOyuosIIOIY
e69gdxwd6crG86i9CiPLXREvzfLTLkjCUvvuFI4laIBaIqsXv/gxYvFKcPr3tg9F
pMMQpXTby/hqQWHRvaTymJqqKbk5dZHmiTA6yZYKgS2DFG4TFnU37JoOVhFrD73e
zLmKI7eirppVT8IWQ6qYmoJX2UP3gT7SWDKlgFGSdbaOKKbz7l8zz86bV5GjXG8J
VKG+gww21ISQZAAzjob4q9Bmi40GDQbYRl2yUSMe0gyw2tEbs8lDyVqQfjFJTekS
tnv96ZqRAS9PqNl3f53FLl96QsvHvLcv/LuvYlcVpEcj74dDzXdDuG25qKGAiFCg
5GvdW423okowF73nvKqH2F33gDUhkUBfbYLAi0uF8PjtIUtNF1CHeFIBuSnJjW8X
K4uDgK964k/jDmF/A7Yz
=HJpo
-----END PGP SIGNATURE-----



More information about the Users mailing list