Expiration and EAP verification question

In strongswan for ikev1 it uses xauth-eap that I use to do validation with RADIUS (that's the only way for ikev1 clients with strongswan). My design is that I don't actually care about secondary authentication with RADIUS since it's already doing certificate validation from strongswan side

PPTP and IPSEC/IKE1/2

I am wondering is it possible to configure one server using a single IP to handle PPTP/IPSEC --- freeradius? Does it make sense (or possible) to create a virtual servers against PPTP and IPSEC separately? I am just wondering what's the best practice. I don't want to increase number of hardware

Re: PPTP and IPSEC/IKE1/2

Alan DeKok aland at deployingradius.com writes: WorkingMan wrote: I am wondering is it possible to configure one server using a single IP to handle PPTP/IPSEC --- freeradius? Yes. Does it make sense (or possible) to create a virtual servers against PPTP and IPSEC separately

Re: Expiration and EAP verification question

Alan DeKok aland at deployingradius.com writes: WorkingMan wrote: My design is that I don't actually care about secondary authentication with RADIUS since it's already doing certificate validation from strongswan side before doing secondary authentication. All is good if I was only

empty preacct and accounting section

I have been seen this weird message for two days now. I setup PPTP and IPSec (ikev1) with freeradius + mysql. In both cases I see Access-Acccept and in Accounting-Request I see these two message: WARNING: Empty preacct section. Using default return values. WARNING: Empty accounting section.

Re: empty preacct and accounting section

Signup_mail2002 signup_mail2002 at yahoo.com writes: I will double check them when I get back to my machine. I think I know what you mean. Will report back. On Sep 25, 2013, at 4:38 PM, Alan Buxey A.L.M.Buxey at lboro.ac.uk wrote: As the msg says. Your preacct {} and accounting {}