Ubuntu IPSec Konfiguration für EAP-Radius

parsed IKE_AUTH response 1 [ N(AUTH_FAILED) ]
[IKE] received AUTHENTICATION_FAILED notify error

Add-VpnConnection -Name MyVPN -ServerAddress {Remote Public FQDN} -TunnelType ikev2 -EncryptionLevel Required -AuthenticationMethod Eap -SplitTunneling -AllUserConnection -RememberCredential -Force -PassThru -DnsSuffix some.suffix

connections {
	MY-VPN {
		remote_addrs = {REMOTE_FQDN}
		local {
			auth = eap
			eap_id = "my.domain\\user"    
                        cacerts = ca.crt
		}
		remote {
			auth = pubkey
			id = {REMOTE_FQDN}
		}
		children {
			net {
				remote_ts = {Subnet1,Subnet2}
				esp_proposals = aes256-aes128-sha256-sha1-modp2048-modp1024
				start_action = start
			}
		}
		version = 2
		proposals = aes256-aes128-sha256-sha1-modp2048-modp1024
	}
}

secrets {
	eap-myuser {
		id = "my.domain\\user"    
		secret = secret
	}
}

created thread 04 [37109]
started worker thread 04
no events, waiting
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[IKE] initiating IKE_SA MY-VPN[44] to {Entfernte Öffentliche IP}
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[NET] sending packet: from {Lokale Private IP}[500] to {Entfernte Öffentliche IP}[500] (500 bytes)
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[NET] received packet: from {Entfernte Öffentliche IP}[500] to {Lokale Private IP}[500] (472 bytes)
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(CHDLESS_SUP) N(MULT_AUTH) ]
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[IKE] local host is behind NAT, sending keep alives
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[IKE] remote host is behind NAT
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds[IKE] sending cert request for "{Zertifikatdetails}"  
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[IKE] establishing CHILD_SA net{44}
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ IDr CPRQ(ADDR DNS) SA TSi TSr N(MOBIKE_SUP) N(NO_ADD_ADDR) N(MULT_AUTH) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[NET] sending packet: from {Lokale Private IP}[4500] to {Entfernte Öffentliche IP}[4500] (352 bytes)
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds[NET] received packet: from {Entfernte Öffentliche IP}[4500] to {Lokale Private IP}[4500] (80 bytes)
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
[ENC] parsed IKE_AUTH response 1 [ N(AUTH_FAILED) ]
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds[IKE] received AUTHENTICATION_FAILED notify error
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watched FD 7 ready to read
watcher going to poll() 1 fds
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
watcher got notification, rebuilding
  watching 7 for reading
watcher going to poll() 2 fds
initiate failed: establishing CHILD_SA 'net' failed  
watcher got notification, rebuilding
terminated worker thread 01