[strongSwan] Selecting eap-mschapv2 for use by NM plugin

Tobias Brunner tobias at strongswan.org
Fri Sep 8 11:48:11 CEST 2017


Hi Alex,

> In my strongswan build, how do I tell NM to use  eap-mschapv2?
> 
> At the moment, by default its using eap-md5 

The server selects the EAP method.  The only option the client has is
returning an EAP-Nak with the methods it supports/prefers.  strongSwan
does so if the requested method is not supported (i.e. the plugin
implementing it is not loaded), or it is configured to use a different
method (which is not possible in the NM plugin).  So either don't load
the eap-md5 plugin in charon-nm (if the server supports handling EAP-Nak
messages) or change the configuration on the server.

Regards,
Tobias


More information about the Users mailing list