Questions tagged [ikev2]
93 questions
1
vote
2 answers
Checking existence of IPSEC as a meta expression in nftables
Whilst recently setting up a router manually from scratch using Debian, I decided to use nftables along with strongSwan to provide an IKEv2 VPN access into this.
After much frustration along with trial and error, I have finally discovered the…

jren207
- 11
- 4
1
vote
2 answers
Determining root cause of Windows VPN Connection Error 13801
I'm trying to get machine authentication working with Microsoft "always on vpn".. I'm running into error 13801 on attempting to connect with a client. This error implies there is some sort of certificate-related issue - though I've gone through and…

Robert Meany
- 51
- 1
- 6
1
vote
0 answers
Strongswan username and password authentication
Guys I need to set up strongswan to use username and password for connecting instead of certificate! Anyone knows how this is done?

Mr Pro
- 33
- 3
0
votes
0 answers
IKEv2/IPsec. Strongswan server static external ip-address. 2 pcs of Mikrotiks as clients. Routing (or what?) Mikrotiks LAN-subnets
Strongswan 5.7 on Debian 10. Static "white" ip address.
2 Mikrotiks with grey ip addresses from ISPs' and NAT:
/ip address print
2 D 10.141.170.32/16 10.141.0.0 ether1
Mikrotik "A" LAN subnet: 192.168.77.0/24
Mikrotik "B" LAN subnet:…

Vlad
- 13
- 3
0
votes
0 answers
StrongSwan IKEv2 connected but no internet on some internets
I set up the StrongSwan and IKEv2 as remote access on CentOS 7, And it is working great but on some internets (not all, most ADSL modems or 4G modems) it connects but there is no internet access on the VPN connection
I am using eap-mschapv2, and…

Farhad Sakhaei
- 131
- 2
- 10
0
votes
1 answer
IKEv2 certificate error but SSTP successfully connects Windows 10 pro / Windows Server 2019
I'm using Windows server 2019 (installed roles: AD DC, CA, DHCP, DNS, IIS, VPN).
my client is Windows 10 pro.
before installing the Online responder role and having a CRL server, IkEv2 was working, but after installing and configuring that role (in…
user299093
0
votes
0 answers
Stuup StrongSwan with user Cert
i will setting up strongswan and have some trouble with configure it. I can log in with user/pass but i will replace it with user.p12 certificate. When i add rightauth2=pubkey is login with user/pass no more working auth with user.p12 is no…

Hannes Peter
- 1
- 2
0
votes
1 answer
Strongswan: Connecting PSK & EAP at a time
I have successfully setup strongswan on a virtual Server. I basically have two kinds of configurations
Using EAP (username/password for Android Strongswan Client).
PSK (for IOS devices using built in VPN client)
I am able to connect more than…

Ajji
- 131
- 7
0
votes
1 answer
Does IKEv2 support initiator authentication by pre-shared key _and_ password?
I'd like to configure an IKEv2 VPN gateway for multiple remote users to access a private network.
I have a test setup where the responder authenticates itself with a self-signed certificate. The initiator authenticates with a username and…

Phil Frost
- 647
- 5
- 18
0
votes
2 answers
Strongswan IKEv2 for iOS devices
I want to connect a Strongswan IKEv2 VPN on iOS devices. It uses FreeRADIUS server for AAA of users.
It's already working perfectly on Android and Windows devices. but when I try to connect using the iOS device it shows the below logs. I'm manually…

Varun Taliyan
- 26
- 1
- 7
0
votes
1 answer
Use MySQL for storing secrets in Strongswan VPN
I have a working Strongswan IKEv2 VPN, i uses eap-mschapv2 as right auth.
It's working fine as long as I use the ipsec.secrets file to store the user credentials.
# ipsec.secrets file
: RSA vpn-server-key.pem
arav %any : EAP "accessit"
But I want…

Varun Taliyan
- 26
- 1
- 7
0
votes
0 answers
unable to install inbound and outbound IPsec SA (SAD) in kernel
I'm trying to install L2TP over IPsec using strognswan and xl2tp daemon.
this is my config :
conn L2TP-PSK-NAT
also=L2TP-PSK-noNAT
conn L2TP-PSK-noNAT
authby=secret
auto=add
keyingtries=3
rekey=no
…

Vitalik Jimbei
- 135
- 2
- 7
0
votes
1 answer
IKEv2 VPN, tunnel ok but no traffic
I setup a vpn on my windows server 2016 (with routing and remote access), the client is a windows 10 pro.
This is the server configuration:
The client connects correctly, but does not receive a packet from the server, why?

matti157
- 101
- 1
0
votes
1 answer
IKEv2 connection from OSX to Windows RRAS disconnects after eight minutes
Using Windows as a VPN client everything works perfectly fine.
When I establish a connection using the integrated IKEv2 client on my Mac (OS X 10.11.6), I get disconnected after eight minutes. Until then it works perfectly as well.
Log on the Mac…

bitfrickler
- 111
- 7
0
votes
1 answer
Best way to setup highly compatible VPN (thinking IKEv2) in Ubuntu 15+?
Having used OpenVPN for a while, I've found it tiresome to install a client on every machine that needs to connect (Android, Windows, Linux.) I'd rather just enter the details in the OS's built in client. My main thought at this point is to use…

Dragoon
- 111
- 2