use EAP identity in tnc/tnccs-20-pdp scenario

2013-02-12 20:41:37 +01:00
parent 2a421163bf
commit 7d355f853d
8 changed files with 12 additions and 10 deletions
@@ -2,5 +2,5 @@

 : RSA aaaKey.pem

-carol@strongswan.org : EAP "Ar3etTnp"
-dave@strongswan.org  : EAP "W7R0g3do"
+carol : EAP "Ar3etTnp"
+dave  : EAP "W7R0g3do"
@@ -12,12 +12,12 @@ conn %default

 conn home
 	left=PH_IP_CAROL
-	[email protected]
 	leftauth=eap
 	leftfirewall=yes
 	right=PH_IP_MOON
 	[email protected]
 	rightsubnet=10.1.0.0/16
 	rightauth=pubkey
+	eap_identity=carol
 	aaa_identity="C=CH, O=Linux strongSwan, CN=aaa.strongswan.org"
 	auto=add
@@ -1,3 +1,3 @@
 # /etc/ipsec.secrets - strongSwan IPsec secrets file

-carol@strongswan.org : EAP "Ar3etTnp"
+carol : EAP "Ar3etTnp"
@@ -12,12 +12,12 @@ conn %default

 conn home
 	left=PH_IP_DAVE
-	[email protected]
 	leftauth=eap
 	leftfirewall=yes
 	right=PH_IP_MOON
 	[email protected]
 	rightsubnet=10.1.0.0/16
 	rightauth=pubkey
+	eap_identity=dave
 	aaa_identity="C=CH, O=Linux strongSwan, CN=aaa.strongswan.org"
 	auto=add
@@ -1,3 +1,3 @@
 # /etc/ipsec.secrets - strongSwan IPsec secrets file

-dave@strongswan.org : EAP "W7R0g3do"
+dave : EAP "W7R0g3do"
@@ -28,6 +28,6 @@ conn rw-eap
 	leftauth=pubkey
 	leftfirewall=yes
 	rightauth=eap-radius
-	rightid=*@strongswan.org
 	rightsendcert=never
 	right=%any
+	eap_identity=%any
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

 charon {
-  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac stroke kernel-netlink socket-default eap-radius updown
+  load = curl aes des sha1 sha2 md5 pem pkcs1 gmp random nonce x509 revocation hmac stroke kernel-netlink socket-default eap-identity eap-radius updown
  multiple_authentication=no
  plugins {
    eap-radius {