Hi Julian, Thanks for the reply. I changed the default eap type to mschapv2 but the problem persists. Do you mind to post your strongswan.conf and ipsec.conf so I can make sure it's not a strongswan but a freeradius problem? Thank you.
> Date: Fri, 28 Oct 2011 17:10:36 +0200 > From: julian.poschm...@rwth-aachen.de > To: users@lists.strongswan.org > Subject: Re: [strongSwan] Strongswan+RADIUS secret code problem? > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi, > > I have similar setup, here two caveeats I had: > > 1) Windows 7 was not happy with the eap-type the radius server > suggested and quit with error 13801. I had to set "default_eap_type = > mschapv2" in eap.conf. I think Windows 7 only supports eap-mschapv2 > for it's ikev2 client. Maybe there is a more elegant way than changing > the default eap type. I haven't looked further into it. > > 2) There have been license issue with openssl in freedradius under > debian/ubuntu resulting in the repo version being compiled with very > limited functionality. Although it shouldn't have an impact on > eap-mschapv2 (I think), maybe it's worth a try compiling freefradius > yourself. > > Regards, > Julian > > Am 28.10.2011 06:37, schrieb T Z: > > Hi all, > > > > I'm using Strongswan 4.5.2 (from Debian squeeze-backports) and > > Freeradius 2.1.0 (from Debian stable) to construct an IKEv2 VPN for > > my clients. It seems that Strongswan is connected with Freeradius, > > but client connection just fails. Testing with Windows 7 IKEv2 > > client, it prompts "Error 13801: IKE authentication credentials are > > unacceptable." > > - -- > Julian Poschmann > Josefstr. 126 > 52080 Aachen-Eilendorf > > Telefon: +49 170 3295135 > E-Mail: julian.poschma...@rwth-aachen.de > PGP-ID: 0x7D51DD8B > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.17 (MingW32) > > iEYEARECAAYFAk6qxewACgkQJmSm8H1R3YtLhwCfWyuSXztlTxVFRfOMhLYgW4cz > sjgAn31r+lBORw7Z3P38ZWNn2gtFtoAh > =Vytf > -----END PGP SIGNATURE----- > > _______________________________________________ > Users mailing list > Users@lists.strongswan.org > https://lists.strongswan.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users
