Windows 7 Client Configuration using EAP-MSCHAPv2¶

In the Network and Sharing Center choose Set up a new connection or network
and as a connection option select Connect to a workplace:

Click on Use my Internet connection (VPN):

Enter the IPv4 or IPv6 internet address or the fully-qualified hostname of the
strongSwan VPN gateway. The destination name string can be chosen freely -
let's call the connection VPN:

Enter your user name and password. These credentials are used in the MSCHAPv2 authentication exchange.

Windows 7 will try to use IKEv2 to establish the VPN connection.
If that fails, it will fall back to other VPN protocols.

To restrict Windows 7 to IKEv2, you might want to change the Type of VPN
to IKEv2 in the Security tab of the VPN Properties menu.