HI,
on 6.41.2, trying to set up a IKEv2 vpn server through this guide, https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_using_IKEv2_with_RSA_authentication
but after follow this guide, none of my clients(macos10.13, ios11.2.6, windows10) can successfully connect to my vpn.
can anyone help me with this?
here’s the debug log when I was trying to connect with IOS:
16:25:17 ipsec matched proposal:
16:25:17 ipsec proposal #4
16:25:17 ipsec enc: aes128-cbc
16:25:17 ipsec prf: hmac-sha1
16:25:17 ipsec auth: sha1
16:25:17 ipsec dh: modp1024
16:25:17 ipsec processing payload: KE
16:25:17 ipsec adding payload: SA
16:25:17 ipsec adding payload: KE
16:25:17 ipsec adding payload: NONCE
16:25:17 ipsec adding payload: NOTIFY
16:25:17 ipsec notify: NAT_DETECTION_SOURCE_IP
16:25:17 ipsec adding payload: NOTIFY
16:25:17 ipsec notify: NAT_DETECTION_DESTINATION_IP
16:25:17 ipsec adding payload: CERTREQ
16:25:17 ipsec,info new ike2 SA (R): 117...221[500]-117...45[8463] spi:e3901275********:5f5d55f3********
16:25:17 ipsec processing payloads: NOTIFY
16:25:17 ipsec notify: REDIRECT_SUPPORTED
16:25:17 ipsec notify: NAT_DETECTION_SOURCE_IP
16:25:17 ipsec notify: NAT_DETECTION_DESTINATION_IP
16:25:17 ipsec notify: IKEV2_FRAGMENTATION_SUPPORTED
16:25:17 ipsec (NAT-T) REMOTE
16:25:17 ipsec KA list add: 117...221[4500]->117...45[8463]
16:25:17 ipsec ike2 request, exchange: AUTH:1 117...45[25951]
16:25:17 ipsec peer ports changed: 8463 → 25951
16:25:17 ipsec KA remove: 117...221[4500]->117...45[8463]
16:25:17 ipsec KA list add: 117...221[4500]->117...45[25951]
16:25:17 ipsec payload seen: ENC
16:25:17 ipsec processing payload: ENC
16:25:17 ipsec payload seen: ID_I
16:25:17 ipsec payload seen: NOTIFY
16:25:17 ipsec payload seen: NOTIFY
16:25:17 ipsec payload seen: ID_R
16:25:17 ipsec payload seen: CONFIG
16:25:17 ipsec payload seen: NOTIFY
16:25:17 ipsec payload seen: NOTIFY
16:25:17 ipsec payload seen: SA
16:25:17 ipsec payload seen: TS_I
16:25:17 ipsec payload seen: TS_R
16:25:17 ipsec ike auth: respond
16:25:17 ipsec processing payload: ID_I
16:25:17 ipsec peer ID (ADDR4): 10.44.36.182
16:25:17 ipsec processing payloads: NOTIFY
16:25:17 ipsec notify: INITIAL_CONTACT
16:25:17 ipsec notify: MOBIKE_SUPPORTED
16:25:17 ipsec notify: ESP_TFC_PADDING_NOT_SUPPORTED
16:25:17 ipsec notify: NON_FIRST_FRAGMENTS_ALSO
16:25:17 ipsec,error EAP not configured
16:25:17 ipsec reply notify: AUTHENTICATION_FAILED
16:25:17 ipsec adding payload: NOTIFY
16:25:17 ipsec notify: AUTHENTICATION_FAILED
16:25:17 ipsec,info killing ike2 SA: 117...221[4500]-117...45[25951] spi:e3901275********:5f5d55f3********
16:25:17 ipsec KA remove: 117...221[4500]->117...45[25951]
I believe that I followed every steps, but I have no clue where to configure EAP.
thx for help:)