Configuring IPsec IKEv2 Remote Access VPN Clients on Ubuntu¶

Before starting, install network-manager-strongswan and strongswan-plugin-eap-mschapv2 using apt-get or a similar mechanism.

Setup the VPN Connection¶

Copy the CA Certificate for the VPN from the firewall to the workstation
Click the Network Manager icon in the notification tray by the clock (Icon varies depending on the type of network in use)
Click Network Connections
Click Add
Select IPsec/IKEv2 (strongswan) under VPN as shown in Adding an IKEv2 VPN on Ubuntu

Adding an IKEv2 VPN on Ubuntu¶

Note

If the option is not present, double check that network-manager-strongswan is installed.

Click Create
Enter a Description (e.g. ExampleCo Mobile VPN)
Select the VPN Tab
Enter the Address of the firewall (e.g. vpn.example.com)
Select the control next to Certificate and browse to find the downloaded CA Certificate
Select EAP for Authentication
Enter the Username to be used for this connection (e.g. alice)
Check Request an inner IP address
Compare the settings to those shown in figure Ubuntu VPN Client Settings

Ubuntu VPN Client Settings¶

To Connect:

Click the Network Manager icon
Click the VPN Name or click VPN Connections to move the slider to the On (1) position

Note

If a password prompt does not appear, the network manager service may need restarted or a reboot of the workstation may be necessary.

To Disconnect: