1. bb-onoff's Avatar
    Hey guys!

    I've spent quite some time trying to connect a BlackBerry Leap with BlackBerry OS 10.3 to a StrongSwan VPN using IKEv2 with EAP-MSCHAPv2 Authentication. Unfortunately the logs on the BlackBerry are very high level and don't give any details. What I was able to find out searching the server logs was this:

    The BlackBerry succeeds in finishing the IKE_SA_INIT and sends an IKE_AUTH request to the server.

    On the server side the request is parsed and the matching config is chosen. The server decides to send an EAP_IDENTITY request to the BlackBerry.
    Therefor it creates a IKE_AUTH response [ IDr CERT AUTH EAP/REQ/ID ] and sends it to the BlackBerry.

    At this point the BlackBerry refuses to go any further. It throws a Connection Error saying Authentication Failure and never answers the request. The server deletes the half open IKE_SA after timeout.

    The log on the BlackBerry only contains one message:
    Error - Can't authenticate. Check your login information, and try again.

    I've tried the exact same setup using an Android phone and the StrongSwan App. That works fine. The Android Phone gives its EAP identity as requested and is queried further with another IKE_AUTH response [ EAP/REQ/MSCHAPV2 ] and so on until the connection is successfully established.

    Has anyone run into the same problems or maybe even got a solution at hand?
    If someone could clearly identify this as a bug or tell me that it just won't work that way, I'd be happy, too. At least I could stop wasting time then and try something else.

    Your's
    bb-onoff
    12-21-17 09:03 AM
  2. Dunt Dunt Dunt's Avatar
    12-21-17 03:28 PM
  3. bb-onoff's Avatar
    Hey guys,

    Unfortunately I couldn't figure out what the problem was but I did a fresh install from scratch, including OS installation, leaving the old system which I adopted from a former admin behind. The new installation works now.

    Bye
    bb-onoff
    12-22-17 05:26 AM
  4. Dunt Dunt Dunt's Avatar
    Hey guys,

    Unfortunately I couldn't figure out what the problem was but I did a fresh install from scratch, including OS installation, leaving the old system which I adopted from a former admin behind. The new installation works now.

    Bye
    bb-onoff
    Clean install solves a lot of problems....
    12-22-17 07:17 AM

Similar Threads

  1. Acceptance: What is your go forward plan?
    By jamesp614 in forum BlackBerry 10 OS
    Replies: 39
    Last Post: 03-26-18, 11:46 AM
  2. Swivel Snap-in Holster for K1 with Dual Shell Case?
    By Kwolkens in forum BlackBerry KEYone
    Replies: 8
    Last Post: 12-26-17, 10:17 AM
  3. BB Classic Camera "can't be started"
    By matask in forum BlackBerry Classic
    Replies: 2
    Last Post: 12-23-17, 01:43 PM
  4. Keyone BB Barcelona meet up for Mobile World Congress
    By mrsimon in forum BlackBerry KEYone
    Replies: 2
    Last Post: 12-21-17, 09:21 AM
  5. IDE Fonts on Linux
    By ShalokShalom in forum New to BlackBerry App Dev
    Replies: 0
    Last Post: 12-21-17, 06:56 AM
LINK TO POST COPIED TO CLIPBOARD