[strongSwan] EAP-MSCHAPv2 via NetworkManager Strongswan plugin

Tobias Brunner tobias at strongswan.org
Tue Nov 6 09:14:42 CET 2018

Hi Alexander,

> (I follow strictly https://nordvpn.com/ru/tutorials/linux/ikev2ipsec/ but the only place they differ I think is "leftauth=eap-mschapv2".)

No, that's not it, the authentication works fine (albeit with EAP-MD5).
 The problem is this:

> Nov 5 18:59:40 node-calculate2 charon-nm[16720]: 13[IKE] received FAILED_CP_REQUIRED notify, no CHILD_SA built

Which makes the difference in the config `leftsourceip=%config`, that
is, you forgot to check the "Request an inner IP address" option in the
NetworkManager plugin.


More information about the Users mailing list