[strongSwan] IKEv2 with eap-radius does not work.

Tobias Brunner tobias at strongswan.org
Mon Mar 27 10:07:41 CEST 2017


Hi,

> Fri Mar 24 08:55:37 2017 : Info: Dropping packet without response 
> because of error: Possible DoS attack from host 127.0.0.1: Too many
> attributes in request (received 201, max 200 are allowed).

It's very unlikely that the eap-radius plugin actually sent that many
attributes to the RADIUS server.  It's probably a misconfiguration of
the RADIUS server.  Just do a web search for that error message and
you'll find that this could happen if you e.g. proxy your RADIUS server
to itself.

Regards,
Tobias



More information about the Users mailing list