Ubuntu-based IKEv2 Client Configuration

Before starting, install network-manager-strongswan and strongswan-plugin-eap-mschapv2 using apt-get or a similar mechanism.

Setup the VPN Connection

  • Copy the CA Certificate for the VPN from the firewall to the workstation

  • Click the Network Manager icon in the notification tray by the clock (Icon varies depending on the type of network in use)

  • Click Network Connections

  • Click Add

  • Select IPsec/IKEv2 (strongswan) under VPN as shown in Adding an IKEv2 VPN on Ubuntu

../_images/ipsec-mobile-ikev2-ubuntu-01-addvpn.png

Adding an IKEv2 VPN on Ubuntu

Note

If the option is not present, double check that network-manager-strongswan is installed.

  • Click Create

  • Enter a Description (e.g. ExampleCo Mobile VPN)

  • Select the VPN Tab

  • Enter the Address of the firewall (e.g. vpn.example.com)

  • Select the control next to Certificate and browse to find the downloaded CA Certificate

  • Select EAP for Authentication

  • Enter the Username to be used for this connection (e.g. alice)

  • Check Request an inner IP address

  • Compare the settings to those shown in figure Ubuntu VPN Client Settings

../_images/ipsec-mobile-ikev2-ubuntu-02-vpnsettings.png

Ubuntu VPN Client Settings

  • Click Save

  • Click Close

Connecting and Disconnecting

To Connect:

  • Click the Network Manager icon

  • Click the VPN Name or click VPN Connections to move the slider to the On (1) position

Note

If a password prompt does not appear, the network manager service may need restarted or a reboot of the workstation may be necessary.

To Disconnect:

  • Click the Network Manager icon

  • Click VPN Connections to move the slider to the Off (0) position