Hi Richard, You either need the md4 plugin, or one of the openssl or gcrypt plugins (which also provide the MD4 algorithm) to use EAP-MSCHAPv2 (there should be error in the log during startup regarding the missing dependency).
The openssl plugin is shipped with libstrongswan-standard-plugins, the gcrypt plugin with libstrongswan-extra-plugins, the md4 plugin is not built/packaged by Debian. If you already have the plugins installed, make sure they are loaded [1]. Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/PluginLoad