You assumed right. :) Ok I'll try to get it running with a proper ipsec.conf configuration without the network-manager plugin.
thanks very much for your help kind regards Claude On Thursday 03 June 2010 10:08:48 Martin Willi wrote: > > > 16[IKE] EAP method EAP_MSCHAPV2 succeeded, no MSK established > > > > 14[IKE] verification of AUTH payload without EAP MSK failed > > Then I'd assume you are using FreeRADIUS :-). > > It does not include the MSK in MSCHAPv2 if used over EAP. IKEv2 however > requires the MSK to calculate the AUTH payload. > > In its current form, you can't use FreeRADIUS for your setup, my > apologies. One could extend FreeRADIUS to copy over the MPPE keys, but > writing such a patch is not something I can do in a few minutes. > > Regards > Martin > > -- Claude Tompers Ingénieur réseau et système Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
