[strongSwan] questions on eap-gtc and xauth

[karthik kumar]

Hi,
   We are setting up oath based VPN connection with pam_oath

I have setup in my local with the Xauth config something like this

reponder
leftauth=pubkey
rightauth=pubkey
rightauth2=xauth-pam

initiator
leftauth=pubkey
rightauth=pubkey
leftauth2=xauth
xauth=client
xauth_identity=<username>

and it works well and then I came across the eap-gtc plugin,
a. can someone advice on why would anyone use eap-gtc when xauth works well
for authenticating user/pass. Is it because xauth can use only ikev1 ?
b. also if I use eap-gtc the (pam)backend is still xauth-pam right. so why
would anyone use it
c. how do I run ikev1 (xauth) and ikev2 (eap-gtc) at the same time ? any
sample configuration will be helpful

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180208/5c7e72ca/attachment.html>