IPsec Remote Access VPN Example Using IKEv2 with EAP-TLS

Configuration guides, troubleshooting and practical advice for AZTCOFW.

Articles

6 results

Add Firewall Rules for IPsec

Firewall rules are necessary to pass traffic from IPsec clients. Navigate to Firewall > Rules , IPsec tab Review the current rules. If there is an “allow all” style rule, then there is no need to add another. Continue to

Add the Client VPN Connection

With the certificates properly imported, now it is time to create the client VPN connection. There are several ways to add such a connection, depending on the version of Windows being used. Adapt as needed. Open Network

Import the CA to the Client PC

The server setup is complete, the following tasks will configure the client side. Export CA Cert from the AZTCO-FW router and download it to the client PC Navigate to System > Cert Manager , Certificate Authorities tab i

Import the Client Certificate to the Client PC

Export client certificate from the pfSense router and download it to the client PC Navigate to System > Cert Manager , Certificates tab in the pfSense webGUI Click by the certificate to download a .p12 file containing th

Set up Mobile IPsec for IKEv2+EAP-TLS

With the certificate structure prepared, the next task is to configure the necessary IPsec settings. The settings below have been tested and found to work, but other similar settings may function as well. Feel free to tr

Setup Certificates

Similar to OpenVPN, a set of certificates is required for the server and clients. Create a Certificate Authority If one is not already available, then the first task is to create a Certificate Authority. Navigate to Syst