About johankrug

johankrug · 12-19-2023

Hello all, I'm trying to set up my ISR4321 running IOS XE 17.03.05 as a FlexVPN-server for Remote Access (RA) with various clients (Windows 10, Apple's iOS, Android, no AnyConnect), based on ikev2, without using client-side certificates. My current p...

johankrug · 12-29-2023

Modest bump.. Anyone that can help me with this issue?

johankrug · 12-21-2023

Alright. So, if I understand correctly, "query-identity" is to be set, which queries the identity of the client. However, Windows replies with its IP-address and this is not a valid identity, so the authentication fails. When "query-identity" is not ...

johankrug · 12-20-2023

I'm trying to make this config work on my ISR4321 running IOS XE 17.03.05. Should be relatively new in terms of supported features, hence my wish to move to a IKEv2 VPN-server-config.Plan B would be to move to ASA but I was hoping to make it work on ...

johankrug · 12-20-2023

Thank you. A bit less vague now.Following your advice, I started from scratch. Imported the p12-certificate which I created using the tutorial I linked earlier, and applied various bits and pieces to my config: aaa new-model ! ! aaa authentication lo...

johankrug · 12-19-2023

Yes, things got messy with trying out various configurations. Indeed it would be good to start from scratch.I have to say that I'm still somewhat vague on the certificate-side of things. As MHM replied, I only need a certificate on the router-side. H...

Member Since	‎12-19-2023 08:10 AM
Date Last Visited	‎01-02-2024 04:24 AM
Posts	9

User Statistics

User Activity

FlexVPN with built-in clients

Re: FlexVPN with built-in clients

Re: FlexVPN with built-in clients

Re: FlexVPN with built-in clients

Re: FlexVPN with built-in clients

Re: FlexVPN with built-in clients