Hi There,
I have the same problem as yours. So this makes me open a case this morning...
- Strongswan IKEv2 Client is working Fine on Linux (for both EAP-MSCHAPv2 and certificate authentication)
- But, I'am unable to connect with Windows 7: I've got a 13868 error on Windows 7. SSL VPN user logs shows that credentials are accepted and a IKEv2 Protocol error (IKEV2_NO_PROPOSAL_CHOSEN).
For info, on linux, my ipsec.conf contains the following:
# ipsec.conf - strongSwan IPsec configuration file
config setup
charonstart=yes
plutostart=yes
# Add connections here.
conn %default
ikelifetime=60m
keylife=20m
rekeymargin=3m
keyingtries=1
keyexchange=ikev2
conn sslvpn
leftauth=eap-mschapv2
leftid=<your username>
right=<your SSL VPN IP Address used for IKEv2>
rightid=%any
rightauth=rsasig
rightsubnet=<the subnet you want to have access>
auto=add
leftsourceip=%config
You should add the corresponding password on ipsec.secrets file:
<your username> : EAP "<your password>"
You should add the corresponding ROOT CA used for the SSL VPN certificate on the /etc/ipsec.d/cacerts folder.
On the SSL VPN, I use a local backend, with clear text password. Do not forget that only local auth (with clear text password option ) and Active Directory Backend are supported to do MSCHAPv2.
I hope that radius backend will be supported soon (all the EAP stuff is already on my radius server...).
Regards,
Vincent
