Hi Alan, > 02[IKE] RADIUS authentication of '...' successful > 02[IKE] EAP method EAP_SIM succeeded, MSK established
> 01[IKE] verification of AUTH payload with EAP MSK failed > Bear in mind that the same SIM Card and Security Gateway works fine on > Andorid. It don't think it is related to strongSwan. As you're using a RADIUS backend, EAP-SIM and MSK derivation happens outside of strongSwan. As it works with Android, it might be that the Blackberry is calculating the IKEv2 AUTH payload from the MSK differently. You might try to increase the debug level on strongSwan to see what values are used for AUTH payload calculation. If you can compare these values with those one your UMA client, you might see a difference. Regards Martin _______________________________________________ Dev mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/dev
