Re: certificate bypass in osmoepdg

Hi, I have understood that you used EAP-AKA for UE authentication. I amnot able to find EAP-AKA as mutual authenticator in ePDG standard. Can you please refer the clause where you get this point to use EAP-AKA as mutual authenticator between UE and ePDG. Alsoin the template swanctl.conf you have use EAP-AKA in both local and remote side. Whereas for epdg you have written a new auth method EAP-EPDG, right? That means when UE sends packet ePDG will invoke its EPDG code inside strongswan and then extractUE's EAP identity and sends to AAA for authentication. Here UE is getting authenticated not the ePDG. Is my understanding correct? Thanks Subhajit On Mon, 17 Feb 2025 14:21:35 +0100, Alexander 'lynxis' Couzens wrote Hi Subhajit, no it's based on EAP-AKA or EAP-AKA' which allows mutual authentication. Yes, the certificate would also improve the situation, but it's optional. You can find a description of my setup here: https://projects.osmocom.org/projects/osmo-epdg/wiki/Hosted_epdg_playground Further to read: https://projects.osmocom.org/projects/osmo-epdg/wiki/EPDG_implementation_pl… I used the following setup for testing: https://gitea.osmocom.org/ims-volte-vowifi/ansible-prototype/src/branch/mas… Best, lynxis Thanks & Regards Subhajit Chatterjee Staff No : 5221 C-DOT Mehrauli,New Delhi