[strongSwan] questions on eap-gtc and xauth

karthik kumar kumarkarthikn at gmail.com
Fri Feb 9 07:11:13 CET 2018


any help on this ?

On Thu, Feb 8, 2018 at 8:54 PM, karthik kumar <kumarkarthikn at gmail.com>
wrote:

> Hi,
>    We are setting up oath based VPN connection with pam_oath
>
> I have setup in my local with the Xauth config something like this
>
> reponder
> leftauth=pubkey
> rightauth=pubkey
> rightauth2=xauth-pam
>
> initiator
> leftauth=pubkey
> rightauth=pubkey
> leftauth2=xauth
> xauth=client
> xauth_identity=<username>
>
> and it works well and then I came across the eap-gtc plugin,
> a. can someone advice on why would anyone use eap-gtc when xauth works
> well for authenticating user/pass. Is it because xauth can use only ikev1 ?
> b. also if I use eap-gtc the (pam)backend is still xauth-pam right. so
> why would anyone use it
> c. how do I run ikev1 (xauth) and ikev2 (eap-gtc) at the same time ? any
> sample configuration will be helpful
>
> Thanks
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180209/b01b8c5e/attachment.html>


More information about the Users mailing list