Hi Martin, On Thursday 03 June 2010 09:26:56 you wrote: > Hi Clause, > > > Jun 3 08:21:38 vpn6-test charon: 10[IKE] received EAP_NAK, sending > > EAP_FAILURE > > Seems that the client does not like the EAP method offered. I assume > you're using MSCHAPv2, so double check that the client has the > eap-mschapv2 and the eap-identity modules installed and loaded.
I changed the configuration in freeradius as well as in Windows 7 (easier to configure anyway ;) ). Now I get the same error for both Windows 7 and Ubuntu : Jun 3 09:47:02 vpn6-test charon: 02[ENC] parsed IKE_AUTH request 2 [ EAP/RES/ID ] Jun 3 09:47:02 vpn6-test charon: 02[IKE] received EAP identity 'ctompers' Jun 3 09:47:02 vpn6-test charon: 02[IKE] initiating EAP_RADIUS method Jun 3 09:47:02 vpn6-test charon: 02[ENC] generating IKE_AUTH response 2 [ EAP/REQ/MSCHAPV2 ] Jun 3 09:47:02 vpn6-test charon: 02[NET] sending packet: from 192.168.1.13[4500] to 192.168.3.19[4500] Jun 3 09:47:03 vpn6-test charon: 12[NET] received packet: from 192.168.3.19[4500] to 192.168.1.13[4500] Jun 3 09:47:03 vpn6-test charon: 12[ENC] parsed IKE_AUTH request 3 [ EAP/RES/MSCHAPV2 ] Jun 3 09:47:03 vpn6-test charon: 12[ENC] generating IKE_AUTH response 3 [ EAP/REQ/MSCHAPV2 ] Jun 3 09:47:03 vpn6-test charon: 12[NET] sending packet: from 192.168.1.13[4500] to 192.168.3.19[4500] Jun 3 09:47:03 vpn6-test charon: 16[NET] received packet: from 192.168.3.19[4500] to 192.168.1.13[4500] Jun 3 09:47:03 vpn6-test charon: 16[ENC] parsed IKE_AUTH request 4 [ EAP/RES/MSCHAPV2 ] Jun 3 09:47:03 vpn6-test charon: 16[IKE] EAP method EAP_MSCHAPV2 succeeded, no MSK established Jun 3 09:47:03 vpn6-test charon: 16[ENC] generating IKE_AUTH response 4 [ EAP/SUCC ] Jun 3 09:47:03 vpn6-test charon: 16[NET] sending packet: from 192.168.1.13[4500] to 192.168.3.19[4500] Jun 3 09:47:03 vpn6-test charon: 14[NET] received packet: from 192.168.3.19[4500] to 192.168.1.13[4500] Jun 3 09:47:03 vpn6-test charon: 14[ENC] parsed IKE_AUTH request 5 [ AUTH ] Jun 3 09:47:03 vpn6-test charon: 14[IKE] verification of AUTH payload without EAP MSK failed Jun 3 09:47:03 vpn6-test charon: 14[ENC] generating IKE_AUTH response 5 [ N(AUTH_FAILED) ] Jun 3 09:47:03 vpn6-test charon: 14[NET] sending packet: from 192.168.1.13[4500] to 192.168.3.19[4500] The strongswan server configuration is still the same. thanks very much kind regards Claude > > For more information about the client error, have a look > at /var/log/daemon.log. > > Regards > Martin > > -- Claude Tompers Ingénieur réseau et système Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users