IKEv2 should support more EAP modes, especially GTC.

Number:rdar://18268795 Date Originated:08-Sep-2014 12:16 PM
Status:Open Resolved:
Product:iOS Product Version:iOS 8.0 beta 5 (12A4345d)
Classification:Feature Request Reproducible:
Based on the device logs, it appears that IKEv2 only supports MSCHAPv2 for EAP credentials. That's just a guess, since the documentation makes no mention of supported EAP modes. We need EAP-GTC in order to mimic the old XAuth behavior.

Steps to Reproduce:
1. Configure an IPSec/IKEv2 server with EAP-GTC.
2. Configure an iOS 8 device with an IKEv2 VPN configuration to match.
3. Try to connect.

Expected Results:
iOS 8 should respond to EAP-GTC requests.

Actual Results:
IKEv2 fails. No response is sent to the server and the handshake eventually times out.

iOS 8.0 beta 5 (12A4345d)


iPod Touch (MD723LL/A)



Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!