ikev2 assign always same "dynamic address" to same client

RouterOS General
21

sorry, but i’m an idiot…

i try to connect with another pc and works perfectly!!!
i think the problem is on my laptop i have also a certificate of my CHR (that of my first post)
can i have only one ipsec ikev2 on a single pc/laptop?
or i was wrong on setup ikev2 server?

thank you

22

If you want to use more than one own certificate on the same Windows PC, you have to use a PowerShell command to link the root CA certificate to the VPN configuration, it cannot be chosen using the GUI. But you can, instead, import the certificate of some other root CA to the Mikrotik acting as responder and let the client authenticate itself using a certificate signed by that other root CA. I.e. you can use a single certificate on a PC for connection to multiple responders.

23

so i can create vpn to this powershell command?

http://forum.mikrotik.com/t/ikev2-win10-select-certificate-multiple-vpn-tunels/120437/1

i will try … thank you in advance!!!

24

Not create, modify. The powershell command only configures an already existing VPN “interface” to authenticate itself using a certificate signed by a specific root CA.

25

ok thank you.