Re: [strongSwan] questions on eap-gtc and xauth

[karthik kumar]

any help on this ?

On Thu, Feb 8, 2018 at 8:54 PM, karthik kumar 
wrote:

> Hi,
>We are setting up oath based VPN connection with pam_oath
>
> I have setup in my local with the Xauth config something like this
>
> reponder
> leftauth=pubkey
> rightauth=pubkey
> rightauth2=xauth-pam
>
> initiator
> leftauth=pubkey
> rightauth=pubkey
> leftauth2=xauth
> xauth=client
> xauth_identity=
>
> and it works well and then I came across the eap-gtc plugin,
> a. can someone advice on why would anyone use eap-gtc when xauth works
> well for authenticating user/pass. Is it because xauth can use only ikev1 ?
> b. also if I use eap-gtc the (pam)backend is still xauth-pam right. so
> why would anyone use it
> c. how do I run ikev1 (xauth) and ikev2 (eap-gtc) at the same time ? any
> sample configuration will be helpful
>
> Thanks
>
>
>
>

[strongSwan] questions on eap-gtc and xauth

[karthik kumar]

Hi,
   We are setting up oath based VPN connection with pam_oath

I have setup in my local with the Xauth config something like this

reponder
leftauth=pubkey
rightauth=pubkey
rightauth2=xauth-pam

initiator
leftauth=pubkey
rightauth=pubkey
leftauth2=xauth
xauth=client
xauth_identity=

and it works well and then I came across the eap-gtc plugin,
a. can someone advice on why would anyone use eap-gtc when xauth works well
for authenticating user/pass. Is it because xauth can use only ikev1 ?
b. also if I use eap-gtc the (pam)backend is still xauth-pam right. so why
would anyone use it
c. how do I run ikev1 (xauth) and ikev2 (eap-gtc) at the same time ? any
sample configuration will be helpful

Thanks