Questions tagged [ikev2]
The ikev2 tag has no usage guidance.
82
questions
0
votes
0
answers
109
views
Site-to-Site VPN and Remote Access VPN with Strongswan
I've recently deployed a Strongswan IKEv2 Remote Access VPN in two different sited with two different ubuntu servers. It all works great, but now i want to "merge" the two sites with a site-...
- 1
-1
votes
1
answer
184
views
Strongswan & Windows client: connection freezes in a few minutes
On an AWS VPS, I installed Strongswan to use it as a VPN. It works fine with iPhone client. However, when I try to connect from a Windows client, the SA connection gets established successfully and ...
- 1
0
votes
1
answer
298
views
Failed to start the IKEv2 VPN connection to surfshark via NetworkManager
I try to connect to surfshark VPN provider through IKEv2 manually. Here are the logs
charon-nm[5070]: 05[CFG] received initiate for NetworkManager connection Surfshark IKE2
charon-nm[5070]: 05[CFG] ...
- 103
0
votes
1
answer
401
views
EAP-MS-CHAPv2 verification failed Arch Linux (strongswan)
I cannot get Strongswan, networkmanager-strongswan (client)
work on your Arch-PC. My vpn-strongswan server (hereinafter deb (server)) has been configured for a long time, any devices (such as android, ...
0
votes
1
answer
216
views
pfSense as IPSec remote access client
I have a pfSense router in a residential environment and need to use IPSec/IKEv2 as a remote access client to a commercial VPN provider. I know the pfSense web UI doesn't support the router being the ...
- 1
-1
votes
1
answer
434
views
Cannot connect a Fortigate VPN behind a static NAT to a GCP VPN gateway
Here's the need:
Connect a Fortigate device behind a static 1:1 NAT to the Internet to a Google Cloud Platform (GCP) VPN gateway.
Simplified ASCII Diagram:
LOCAL_LAN ---- Fortigate ----- Fiber modem --...
google-cloud-platform
1
vote
0
answers
99
views
libreswan with Ikev2 client and plain text password
I need to set up a connection to VPN server with Libreswan. I can't use strongswan, since they are not working well together when installed on the same OC.
My system is Linux Debian 10 (Buster)
Kernel ...
0
votes
0
answers
156
views
Vpn . Nps . Active directory . Strongswan ikev2
please help me
I configured a strongswan IKEV2 On Centos7 vps
and NPS and Active Directory for my authentication and accounting(radius) on windows server 2016 vps
when i want to connect to my ikev2 ...
- 1
2
votes
1
answer
1k
views
iPhone users does not connect to StrongSwan VPN, while Android and Windows 10 users do?
I have a StrongSwan VPN that for some reason unknown to me cannot connect iOS users to my VPN server.
A few quick notes:
My StrongSwan server is front for VPN clients who connects to my network. I ...
0
votes
0
answers
384
views
Cannot connect MacOS to StrongSwan VPN server installed on ubuntu
I have an issue connecting to IKEv2 VPN running on an Ubuntu VM on GCP. I am trying to connect with MacOS and Windows. I followed this tutorial to install the VPN on an Ubuntu VM. I need a VPN so that ...
- 121
-1
votes
1
answer
83
views
How to run Windows Ikev2 with NonetworkFirewall?
I have a small problem.I setup Firewall App Blocker in whtielist Mode(means basically It cut all Internet except allowed apps by setting "block all connection that not match firewall rule" ...
1
vote
0
answers
63
views
How to disable all default cryptographic algorithms but the explicitly defined ones in OpenIKED?
I am having issues with setting up highly secure but still high performance IKEv2 tunnels between multiple data centers on OpenBSD nodes, by using very strict security features and allowing the use of ...
- 11
0
votes
1
answer
2k
views
StrongSwan clients fail to connect, Constraint checking failure
Client devices (Runs Windows 10 and Android with StrongSwan app) fail to connect. Certificates signed by one authority, CN is set as server public ip.
Here's ipsec.conf:
config setup
include /var/lib/...
0
votes
1
answer
3k
views
Strongswan Error: no config named 'foo'
On Ubuntu 20.04, I am trying to establish a VPN tunnel to a IKEv2/Ipsec VPN site using Strongswan.
However, even though I have the file /etc/ipsec.conf as shown
# ipsec.conf - strongSwan IPsec ...
- 1,429
0
votes
0
answers
409
views
Is it possible to have 2 left ids in strongswan?
I need my strongswan server to operate on 2 domain names .
ipsec.conf currently contains : leftid=@sub.domain.com
How can I add another domain ? Is this syntax gonna work?
leftid=@sub.domain.com,@sub2....
- 27
0
votes
1
answer
327
views
IKEv2 VPN on server 2019 suddenly stops working
We have a number of customers using Server 2019 as a VPN server with the IKEv2 protocol through the Routing and Remote Access (RRAS) service. Suddenly, every single one of them gets the following ...
0
votes
1
answer
130
views
Does ikev1 or ikev2 support a no-authentication option? If so, how can I enable that in strongswan?
For testing purposes, I want to setup an ipsec tunnel using IKEv1 or v2 (preferably v2) that does not require any authentication - so just using the protocol to agree on the secret-keys of the ipsec ...
- 1
2
votes
0
answers
471
views
Can't entablish VPN IKEv2 conection from Google Cloud Platform to FirePower CISCO
I hope you guys can help me with something that drives me crazy.
On this page, Google says the protocols and cipher they accept to establish the VPN connection: https://cloud.google.com/network-...
- 21
0
votes
1
answer
2k
views
IKev2 strongswan got deleting half open IKE_SA with x.x.x.x after timeout with iOS device
I installed an IKEv2 strongswan vpn server on ubuntu 18.04 and also I use a valid Let's encrypte CA for that. I want to use it on an application for iOS.
So here is the IPSec.conf :
config setup
...
- 113
0
votes
1
answer
552
views
How to set remoteId and server certificate check Strongswan IKEv2 ubuntu 18.04
I am a new member in IKEv2, and I want to install an IKEv2 vpn on an ubuntu 18.04 server, I did it through this tutorial , but I have a couple of questions.
First how can I configure its remote id, ...
- 113
0
votes
0
answers
2k
views
StrongSwan config issue: no matching peer config found
I am trying to establish a VPN between my router (running OpenWrt) and my smartphone using IPsec.
I followed the guide at https://openwrt.org/docs/guide-user/services/vpn/ipsec/strongswan/roadwarrior
...
- 1
3
votes
2
answers
2k
views
EAP / MSCHAPv2 authentications fails (only) on Windows with custom authenticator
I have a project that involves custom client authentication for the StrongSwan IKEv2 server implementation on Linux.
I am running: StrongSwan 5.4.0 with eap-radius plugin
Currently, we use FreeRadius ...
- 31
2
votes
1
answer
1k
views
Mikrotik IKEv2/ipsec + Windows 10 = no split include routes
I am deploying a solution using IKEv2+ipsec with certificates to connect roadwarriors to corporate network. Mikrotik CHR is used as entry point.
All was swift until I started deploying the solution on ...
- 287
0
votes
1
answer
104
views
What can cause an iOS device to be able to connect to IKEv2/IPsec VPN over LTE but not browse most websites?
Everything works fine over Wi-Fi.
I tried disabling IPv6 using a provisioning profile.
I tried on two different devices (iPhone 6 and current iPhone SE) using the same VPN provisioning profile (each ...
- 561
1
vote
1
answer
3k
views
migrating ipsec.conf to swanctl.conf, cant seem to get it to work
this is my ipsec.conf that works as it should:
conn pelle
left=%defaultroute
leftsourceip=%config
leftauth=eap-mschapv2
eap_identity=min user
right=vpn.mydomain.com
rightsubnet=0.0.0.0/0
...
0
votes
2
answers
1k
views
Specifying machine certificate issuer with Windows VPN
I am trying to create a Windows Always On VPN connection between an AD and AAD joined Windows 10 client and a StrongSwan VPN server. The Windows client has multiple "Client Authentication" ...
- 267
0
votes
2
answers
3k
views
Windows 10 IKEv2 IPSec VPN client & DH Group15 (modp3072) or higher
Is there any way to configure the Windows 10 VPN client to use DH Group 15 / Group15 (modp3072) or higher for key exchange?
I am somewhat distressed that the CNSA specifies use of DH Group 15 (...
0
votes
0
answers
204
views
freeradius and configure eap or pap with rest
free radius and configure eap or pap with rest
i want use strongswan with free radius and rest module,
i see sql and eap work together,
how can configure eap with rest ?
the important part is ...
1
vote
1
answer
1k
views
Checking existence of IPSEC as a meta expression in nftables
Whilst recently setting up a router manually from scratch using Debian, I decided to use nftables along with strongSwan to provide an IKEv2 VPN access into this.
After much frustration along with ...
- 11
0
votes
0
answers
350
views
RRAS IKEv2 VPN no response
We have an IPSEC/L2TP PSK VPN on Windows Server 2012 using RRAS. This usually works fine, but now with so many staff working from home due to COVID-19, I am getting complaints of the VPN dropping out ...
- 127
1
vote
2
answers
2k
views
Determining root cause of Windows VPN Connection Error 13801
I'm trying to get machine authentication working with Microsoft "always on vpn".. I'm running into error 13801 on attempting to connect with a client. This error implies there is some sort of ...
- 41
0
votes
0
answers
726
views
IKEv2 Need a small help on Strongswan
I'm trying to create an IKEv2 Strongswan VPN server (U5.7.2/K5.3.0-42-generic) since two days on my personnal VPS (Ubuntu 19.10) to make some tests before implement it on the Unifi equipment of my ...
- 1
0
votes
1
answer
234
views
IKev2 VPN Event ID 20209 - Server Authentication
I have made only one certificate for VPN access with ikev2. Within 2 days i got event id 20209, even though I didn't tried to connect. The certificate is still with me and no one else has access to it....
- 111
0
votes
0
answers
395
views
Strongswan Centos 7 Config Issue
I have a problem with configuring Strongswan on Centos 7 ! First please notice that I want to connect with only username and password and I don't want to import any profiles on my phone ! My server ip ...
- 27
1
vote
0
answers
269
views
Strongswan username and password authentication
Guys I need to set up strongswan to use username and password for connecting instead of certificate! Anyone knows how this is done?
- 13
0
votes
0
answers
33
views
Rekeying denies protocols/NAT issue or config?
I'm using strongswan to connect to a MAC server using IKEv2/IPsec configuration. The server uses the proposed algorithms to establish the SA and everything works great. Upon rekeying however, the ...
0
votes
1
answer
100
views
strongswan ikev2 connect to the same server
I have a strongswan ikev2 vpn installed on my server.
With my win10 laptop I can connect to the vpn and and connect to everything via vpn.
But how can I connect to my server? I have a service on a ...
1
vote
1
answer
752
views
Test ike2 vpn connection on console possible?
Whatever I google for I find tutorials how to setup an IKEv2 VPN server either UI client configuration for different OS.
Is it possible to test the connection with a client in a Linux console ...
- 179
0
votes
0
answers
292
views
IKEv2/IPsec. Strongswan server static external ip-address. 2 pcs of Mikrotiks as clients. Routing (or what?) Mikrotiks LAN-subnets
Strongswan 5.7 on Debian 10. Static "white" ip address.
2 Mikrotiks with grey ip addresses from ISPs' and NAT:
/ip address print
2 D 10.141.170.32/16 10.141.0.0 ether1
Mikrotik "A" LAN ...
- 13
3
votes
1
answer
10k
views
strongswan ikev2 with debian. EAP authentication failed. loading EAP_MSCHAPV2 method failed
I can't get Strongswan to run on my Debian machine. I've already done a tutorial to get it to run on a Ubuntu machine but it seems impossible to me to get it to run on my Debian machine. I actually ...
0
votes
0
answers
435
views
StrongSwan IKEv2 connected but no internet on some internets
I set up the StrongSwan and IKEv2 as remote access on CentOS 7, And it is working great but on some internets (not all, most ADSL modems or 4G modems) it connects but there is no internet access on ...
- 131
0
votes
1
answer
282
views
IKEv2 certificate error but SSTP successfully connects Windows 10 pro / Windows Server 2019
I'm using Windows server 2019 (installed roles: AD DC, CA, DHCP, DNS, IIS, VPN).
my client is Windows 10 pro.
before installing the Online responder role and having a CRL server, IkEv2 was working, ...
user299093
8
votes
2
answers
22k
views
Strongswan IKEv2 vpn on Windows 10 client "policy match error"
I have the newest version of Strongswan vpn on my ubuntu server running.
I followed this tutorial here and got it to work on my android and Iphone.
Now I want to get it to work on my windows 10 ...
- 183
2
votes
1
answer
620
views
How to block an IP for IPSec VPN connections?
This is my current IpTables setup:
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,...
- 1,263
0
votes
1
answer
2k
views
Is strongSwan eap-mschapv2 authentication secure vs using certs?
What level of encryption is used during the authentication part of the connection?
Here’s a sample /etc/ipsec.conf configuration.
config setup
charondebug="ike 1, knl 1, cfg 0"
uniqueids=no
...
- 561
2
votes
0
answers
3k
views
Strongswan stops working after a while
I'm trying hard to resolve one question with my strongswan IKEv2 VPN.
I use Linux strongSwan U5.6.1/K3.10.0-862.el7.x86_64 installed on CentOS 7 and few clients: Windows Server 2012 R2, Windows 10, ...
1
vote
0
answers
4k
views
Porting a Cisco AnyConnect profile from Windows to Mac OSX
I have a client using a VisualStudio solution to manage their website. In order to make edits, they had to set up a Windows 7 laptop for me, which I have to use to connect to their VPN before being ...
- 111
2
votes
0
answers
366
views
Bandwidth control with TC for clients yet to be connected
I have applied bandwidth control using TC and iptables using this tutorial on my Strongswan VPN server.
The bandwidth control works fine ONLY if that specific client is already connected.
For example:...
- 131
1
vote
1
answer
1k
views
Strongswan IKEv2 auth - pubkey and EAP
I'am trying to setup strongswan with pubkey and EAP authentication. To login users need to have certificate and valid credentials.
My certificate is ok. I tested pubkey auth and it was ok, also EAP ...
- 15
0
votes
0
answers
1k
views
Stuup StrongSwan with user Cert
i will setting up strongswan and have some trouble with configure it. I can log in with user/pass but i will replace it with user.p12 certificate. When i add rightauth2=pubkey is login with user/pass ...
Related Tags
vpn × 55
strongswan × 46
ipsec × 30
linux × 7
windows × 6
networking × 4
rras × 4
ikev1 × 4
ubuntu × 3
firewall × 3
radius × 3
eap × 3
centos × 2
iptables × 2
docker × 2
linux-networking × 2
cisco × 2
mac-osx × 2
nat × 2
certificate × 2
windows-10 × 2
remote-access × 2
pfsense × 2
more related tags
Hot Network Questions
- Why is my data not normally distributed while I have an almost perfect QQ plot and histogram?
- Is it acceptable to include information in a poster that wasn't in the publication?
- Why do pro gun and anti abortion (and vice versa) views go together in the USA?
- Is this concept for very low energy space travel plausible?
- How to get the "process IDs" which are logging output to stdout?
- Does cooking food inside a locked pressure cooker preserve it similar to canning?
- Checkmate 30 kings with rooks
- How to replace anti diagonal elements of a matrix
- Installing a 48" vanity between two walls that are 51" apart. How can I cover the 1.5" gaps on the cabinet marble top and the cabinet sides?
- How far from binary?
- What is the best solution to show the invisible area of a window when it's too big?
- Did individuus refer to individual persons in Ancient Rome? Thank you!
- Why are judicial circuits so named?
- what does project onto self mean?
- How to make grep for a regex that appear multiple times in a line
- Can `a?b<c:b>c` be shortened in Javascript?
- How long can my character survive without sleep?
- Why would a particular heat pump model be illegal in my state?
- The Unaverageables
- Find out value of pF capacitors
- Finding the line number of first occurance of a text in bash script
- protein visualization: display a residue in balls and sticks over the structure
- Array access is O(1) implies a fixed index size, which implies O(1) array traversal?
- Relationship between the TQFTs in Kapustin-Witten and Ben-Zvi-Sakellaridis-Venkatesh