Hi Alexander, > (I follow strictly https://nordvpn.com/ru/tutorials/linux/ikev2ipsec/ but the > only place they differ I think is "leftauth=eap-mschapv2".)
No, that's not it, the authentication works fine (albeit with EAP-MD5). The problem is this: > Nov 5 18:59:40 node-calculate2 charon-nm[16720]: 13[IKE] received > FAILED_CP_REQUIRED notify, no CHILD_SA built Which makes the difference in the config `leftsourceip=%config`, that is, you forgot to check the "Request an inner IP address" option in the NetworkManager plugin. Regards, Tobias