Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ikev2]

93 questions
2
votes
0 answers

MacOS native IKEv2 VPN client instead of AnyConnect?

Similar to this question from half a decade ago.. Can the native MacOS IKEv2 VPN client be used in lieu of Cisco AnyConnect client? example anyconnect profile: …
goofology
  • 382
  • 2
  • 16
2
votes
1 answer

IKEV2 configuration file IP pool

I have some problems with configuring VPN using IKEV2. Here is my server configuration file config setup # Uncomment to allow few simultaneous connections with one user account. # By default only one active connection per user allowed. …
CROSP
  • 191
  • 1
  • 1
  • 7
2
votes
0 answers

CentOS + strongswan + iOS VPN API, hal

I'm trying to setup StrongSwan on CentOS for iOS with VPN API. This API uses IKEv2 protocol. Here is my logs + configuration files. When i press connect in iOS device it's getting off in a few moments. It looks like iOS doesn't like some server…
Al.Arak
  • 21
  • 2
2
votes
0 answers

Can't entablish VPN IKEv2 conection from Google Cloud Platform to FirePower CISCO

I hope you guys can help me with something that drives me crazy. On this page, Google says the protocols and cipher they accept to establish the VPN connection: https://cloud.google.com/network-connectivity/docs/vpn/concepts/supported-ike-ciphers We…
Tres06
  • 21
  • 2
2
votes
1 answer

Mikrotik IKEv2/ipsec + Windows 10 = no split include routes

I am deploying a solution using IKEv2+ipsec with certificates to connect roadwarriors to corporate network. Mikrotik CHR is used as entry point. All was swift until I started deploying the solution on Dell notebooks. Once connection to the router is…
Eugene
  • 297
  • 1
  • 12
1
vote
1 answer

Test ike2 vpn connection on console possible?

Whatever I google for I find tutorials how to setup an IKEv2 VPN server either UI client configuration for different OS. Is it possible to test the connection with a client in a Linux console environment (Ubuntu 18.04 LTS)? To connect, the following…
J. Doe
  • 179
  • 1
  • 9
1
vote
1 answer

Is strongSwan eap-mschapv2 authentication secure vs using certs?

What level of encryption is used during the authentication part of the connection? Here’s a sample /etc/ipsec.conf configuration. config setup charondebug="ike 1, knl 1, cfg 0" uniqueids=no conn ikev2 auto=add compress=no …
sunknudsen
  • 701
  • 3
  • 14
  • 28
1
vote
0 answers

Porting a Cisco AnyConnect profile from Windows to Mac OSX

I have a client using a VisualStudio solution to manage their website. In order to make edits, they had to set up a Windows 7 laptop for me, which I have to use to connect to their VPN before being able to access the solution. I am hoping to be able…
user13286
  • 111
  • 1
  • 3
1
vote
1 answer

Strongswan IKEv2 auth - pubkey and EAP

I'am trying to setup strongswan with pubkey and EAP authentication. To login users need to have certificate and valid credentials. My certificate is ok. I tested pubkey auth and it was ok, also EAP is working, but when i trying run this two auth…
user9443103
  • 15
  • 5
1
vote
1 answer

IPSEC IKEv2 not hiding HTTPS

I'm using Linux strongSwan U5.3.5/K4.4.0-116-generic on Ubuntu 16.04 with IOS 11 IKEv2 client. The connection could be successfully established on my client(IOS 11) and if I go to ip check webpage, e.g. myip.com it shows the VPN server's…
chrisky
  • 23
  • 4
1
vote
1 answer

OCSP verification fails in Strongswan (IKEv2)

I've managed to set up an IPsec connection between two (virtual) hosts in transport mode and now I want the server to validate the client's certificate with OCSP. In a third host, I've run an OCSP responder (openssl ocsp -port 80 ...). I can see how…
Ander Juaristi
  • 111
  • 2
1
vote
0 answers

How to configure RRAS on Windows Server 2012 R2 to forward broadcast UDP packets

I have a server running RRAS on Server 2012 R2. Clients connect using an IKEv2 VPN, and are on the same subnet: 192.168.1.0/24 and 255.255.255.0. The server has a single NIC, and VPN ports are forwarded via the router. Clients on the VPN are unable…
Britishly
  • 11
  • 2
1
vote
1 answer

Google Cloud Platform VPN

Is there a way to change the lifetime in seconds for Phase 1 and Phase 2 of Ipsec? I am trying to connect to a Cisco ASA 5550 at a customer site and their lifetime in seconds setting is 86,400(Phase 1) and 28,800(Phase 2). These need to match and…
L Zimmerman
  • 11
  • 2
1
vote
1 answer

Is it possible for ikev2 VPN to do auto route configuration for client during connected?

We've setup a ikev2 VPN server with this tutorial, everything works. The only issue is we don't want client to route all traffic using this VPN, only a particular ip addresses. So, it is possible to configure for the client automatically for the…
Traid
  • 23
  • 4
1
vote
1 answer

no trusted rsa public key found

I am trying to setup ikev2 with strongswan using a wildcard certificate. The config seems to work for iOS with this certificate but doesn't work for Android, getting this error - no trusted rsa public key found '$IP' did anyone face this issue ? if…
Vitalik Jimbei
  • 135
  • 2
  • 7
1
2
3 4 5 6 7