strongSwan KVM Tests / ikev2 / rw-eap-peap-mschapv2
Test ikev2/rw-eap-peap-mschapv2
Description
The roadwarriors carol and dave set up a connection each to gateway moon. The strong mutual authentication is based on EAP-PEAP only (without a separate IKEv2 authentication) with the gateway being authenticated by a server certificate during the EAP-TLS tunnel setup (phase1 of EAP-PEAP). This tunnel protects the ensuing weak client authentication based on EAP-MSCHAPv2 (phase2 of EAP-PEAP).Client carol presents the correct MSCHAPv2 password and succeeds whereas client dave chooses the wrong password and fails.
