Hi,

> What is the difference between the two plugins eap-aka and eap-aka-3gpp2? 

The eap-aka plugin provides the protocol layer of the EAP-AKA
functionality, but no quintuplet calculation. It uses other plugins
implementing the sim_card_t/sim_provider_t interface to actually
calculate the quintuplets.

The eap-aka-3gpp2 plugin is such a backend for quintuplet calculation,
it implements the 3GPP2 specs in software. 

> And where could i fill the IMSI information and shared secret to do the
> eap-aka authentication?? in ipsec.secrets?

The IMSI is configured in ipsec.conf as leftid to use it within the
IKEv2 identity exchange, or as eap_identity to use a separate
EAP-Identity exchange.
For eap-aka-3gpp2, the secret K is looked up in ipsec.secrets (using the
EAP credential type).

Regards
Martin

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to