diff options
| -rw-r--r-- | testing/tests/ikev2/rw-eap-ttls-only/description.txt | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/testing/tests/ikev2/rw-eap-ttls-only/description.txt b/testing/tests/ikev2/rw-eap-ttls-only/description.txt index b3e0450a4..702598e72 100644 --- a/testing/tests/ikev2/rw-eap-ttls-only/description.txt +++ b/testing/tests/ikev2/rw-eap-ttls-only/description.txt @@ -1,4 +1,6 @@ -The roadwarrior <b>carol</b> sets up a connection to gateway <b>moon</b>. -The strong mutual authentication of both peers is based on <b>EAP-TLS</b> only -(without a separate IKEv2 authentication), using TLS client and server certificates, -respectively. +The roadwarriors <b>carol</b> and <b>dave</b> set up a connection each to gateway <b>moon</b>. +The strong mutual authentication is based on <b>EAP-TTLS</b> only (without a separate IKEv2 +authentication) with the gateway being authenticated by a server certificate during the +EAP-TLS tunnel setup (phase1 of EAP-TTLS). This tunnel protects the ensuing weak client +authentication based on <b>EAP-MD5</b> (phase2 of EAP-TTLS). <b>carol</b> presents the +correct MD5 password and succeeds whereas <b>dave</b> chooses the wrong password and fails. |