Problem with dialup IPSEC IKEV2 using RADIUS (Fortiauthenticator) and Forticlient

Hello,

I was not able to make ikev2 work. Ikev1 works ok. Ikev2 but with local authentication(local users in FGT) works ok.

But the integration with Fortiauthenticator does not work.

The forticlient says:

Wrong credentials EAP failed connection to ...

Versions:

FGT:7.4.7

FCT: 7.4.3

FAC: 6.6

I have followed this guides:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Using-IKEv2-for-a-dial-up-IPsec-tunnel-with/ta-p/229663

https://community.fortinet.com/t5/FortiGate/Technical-Tip-IKEv2-dialup-IPsec-tunnel-with-Radius-server/ta-p/191040

But this guides show how to enable EAP-MSCHAPv2 in NPS, I did not find info about Fortiauthenticator.

In Fortiauthenticator ,in Radius Policy I enabled EAP protocols and does not work.

Does anyone have any clue? Any help is appreciate it.

thank you!

Regards.