Re: [strongSwan] Any working two-factor authentication with Windows?

2015-06-29 Thread Martin Willi
Hi, I would like to know if there exist any two-factor combination where one of them is RADIUS, either IKEv1 or IKEv2, which works with Windows (Win7 and above) native VPN client. AFAIK Windows does not support RFC4739. In IKEv1 there is a proprietary extension called AuthIP in Windows, but

Re: [strongSwan] Multiple proposals with different authentication types

2015-06-29 Thread Martin Willi
Hi, [...] when the cisco initiates a connection with both the transforms, the RSA-SIG being first in the list, strongswan replies back with a proposal that contains RSA-SIG, because it is the first in the list, even though the connection is defined as PSK. Is this a bug and is there a way