[strongSwan] EAP-MSCHAPv2 via NetworkManager Strongswan plugin

[Tobias Brunner]

Hi Alexander,

> (I follow strictly https://nordvpn.com/ru/tutorials/linux/ikev2ipsec/ but the only place they differ I think is "leftauth=eap-mschapv2".)

No, that's not it, the authentication works fine (albeit with EAP-MD5).
 The problem is this:

> Nov 5 18:59:40 node-calculate2 charon-nm[16720]: 13[IKE] received FAILED_CP_REQUIRED notify, no CHILD_SA built

Which makes the difference in the config `leftsourceip=%config`, that
is, you forgot to check the "Request an inner IP address" option in the
NetworkManager plugin.

Regards,
Tobias