Hi Alex, > In my strongswan build, how do I tell NM to use eap-mschapv2? > > At the moment, by default its using eap-md5
The server selects the EAP method. The only option the client has is returning an EAP-Nak with the methods it supports/prefers. strongSwan does so if the requested method is not supported (i.e. the plugin implementing it is not loaded), or it is configured to use a different method (which is not possible in the NM plugin). So either don't load the eap-md5 plugin in charon-nm (if the server supports handling EAP-Nak messages) or change the configuration on the server. Regards, Tobias
