Re: [IPsec] IKEv2: RADIUS

Hi Matt, As commented by Andreas, IKEv2 allows any EAP method to be used. For instance, the OpenIKEv2 implementation (http://openikev2.sourceforge.net) allows you to configure the VPN gateway as an EAP pass-throwgh authenticator, that is, just forwarding the received EAP packets from the client

Re: [IPsec] IKEv2: RADIUS

At 8:43 AM +0200 5/26/09, Matthew Cini Sarreo wrote: >We are interested to have our implementation of IKEv2 to provide support for >authentication with a RADIUS server. We did this in IKEv1 by implementing >XAuth. For IKEv2, the only resource that seems to tackle this is >

Re: [IPsec] IKEv2: RADIUS

Hi Matt, IKEv2 allows any EAP protocol to be used for VPN client authentication. Examples are EAP-SIM, EAP-AKA, EAP-MSCHAPv2, EAP-MD5, EAP-GTC, etc. On the VPN gateway you can just forward the EAP messages to a RADIUS server. The following sample scenario shows a strongSwan client doing IKEv2 EAP-

[IPsec] IKEv2: RADIUS

Hello All, My apologies if this has already been asked. We are interested to have our implementation of IKEv2 to provide support for authentication with a RADIUS server. We did this in IKEv1 by implementing XAuth. For IKEv2, the only resource that seems to tackle this is http://www.employees.org/