IKEv2 CP and EAP support
Jump to navigation
Jump to search
CP without EAP.
This rather straight forward. But is it used? Useful? Does StrongSWAN support it?
Design challenge pose to support EAP:
AUTH exchange has [CP] , TSi, TSr. When a receiver get these it reply with EAP and goes off to EAP authentican. However, it must hang on to [CP], TSi, TSr. And after the authentication respond to it. After EAP is complete the initiator does not send TSi and TSr again.
http://tools.ietf.org/html/rfc5996#section-2.15 vs http://tools.ietf.org/html/rfc5996#section-2.19
WPA Supplicant source code has ikev2 has eap_server_ikev2.c what is that?