Hi,

> these two messages are NOT supported by strongSwan 

Yes, our AKA implementation is not complete. It does not support
Identity exchange, pseudonyms or Re-Authentication.

> AKA-Identity

There was no need for AKA-Identity so far, as most setups use a
separate EAP-Identity exchange or directly use the identity of the
IKEv2 exchange.

> AKA-[Re]Authentication

Yes, we don't support it. The IKEv2 exchange is usually more expensive
than full AKA authentication, reducing the benefit of fast
Re-Authentication to a minimum.

> Are there plans to implement support for this anytime soon ?

There is no real interest from our side to extend the EAP-AKA support,
as it is not a feature an ordinary user needs. So if no one steps up to
sponsor the development, we probably won't implement these features
soon.

Regards
Martin

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to