Community discussions

 
huntah
Member Candidate
Member Candidate
Topic Author
Posts: 267
Joined: Tue Sep 09, 2008 3:24 pm

IKEv2 - Win10 Select Certificate Multiple VPN tunels

Wed Jun 13, 2018 4:18 pm

Hi,

I have IKEv2 with cert up and running. Everrthig is working as it should but I have a problem on Win10 1803 machines (maybe also other Win versions).
The config is based on:
https://wiki.mikrotik.com/wiki/Manual:I ... entication

I manage multiple clients and all of the have IKEv2 VPN with certs.
My Win10 client sends the wrong certificate to different VPN Servers. How can I select which cert to use (like on IPAD od Strongswan).
The certs are imported in machine store.. But How can I select which one to use.
Anybody else expirienced and solved this problem?


Regards
Huntah
Last edited by huntah on Wed Jun 12, 2019 1:59 pm, edited 1 time in total.
 
huntah
Member Candidate
Member Candidate
Topic Author
Posts: 267
Joined: Tue Sep 09, 2008 3:24 pm

Re: IKEv2 - Win10 Select Certificate Multiple VPN tunels [SOLVED]  [SOLVED]

Fri Jun 15, 2018 9:00 pm

Hi,

I have found the solution if someone should came accros the same problem.
So the solution is to use powerShell and specify the CA to use:
here is the example.
Set-VpnConnection -Name "My VPN Connection" -MachineCertificateIssuerFilter 'C:\mycerts\cert_export_MikrotikIKEv2-CA.crt'
Now I can have multiple IKEv2 VPN Clients on my Windows Machine.
Maybe an WiKi Update would not be also good because lots of people are using IKEv2 More and More!
 
akarpas
Frequent Visitor
Frequent Visitor
Posts: 82
Joined: Tue Mar 20, 2018 4:46 pm

Re: IKEv2 - Win10 Select Certificate Multiple VPN tunels [SOLVED]

Wed Jun 12, 2019 1:35 pm

Hi,

I have found the solution if someone should came accros the same problem.
So the solution is to use powerShell and specify the CA to use:
here is the example.
Set-VpnConnection -Name "My VPN Connection" -MachineCertificateIssuerFilter 'C:\mycerts\cert_export_MikrotikIKEv2-CA.crt'
Now I can have multiple IKEv2 VPN Clients on my Windows Machine.
Maybe an WiKi Update would not be also good because lots of people are using IKEv2 More and More!
Could you or someone explain more as this is didnt work for me
 
huntah
Member Candidate
Member Candidate
Topic Author
Posts: 267
Joined: Tue Sep 09, 2008 3:24 pm

Re: IKEv2 - Win10 Select Certificate Multiple VPN tunels [SOLVED]

Wed Jun 12, 2019 1:58 pm

What was the error?
You need PowerShell and not CMD.
It wont work if you have the same CA. I havent tried to specify which cert to use with the same CA (Certificate Authority).

This is useful if you have multiple IKEv2 VPN clients on different locations. And all the servers have different CA.
 
akarpas
Frequent Visitor
Frequent Visitor
Posts: 82
Joined: Tue Mar 20, 2018 4:46 pm

Re: IKEv2 - Win10 Select Certificate Multiple VPN tunels [SOLVED]

Wed Jun 12, 2019 2:31 pm

Hi,

I have found the solution if someone should came accros the same problem.
So the solution is to use powerShell and specify the CA to use:
here is the example.
Set-VpnConnection -Name "My VPN Connection" -MachineCertificateIssuerFilter 'C:\mycerts\cert_export_MikrotikIKEv2-CA.crt'
Now I can have multiple IKEv2 VPN Clients on my Windows Machine.
Maybe an WiKi Update would not be also good because lots of people are using IKEv2 More and More!
Could you or someone explain more as this is didnt work for me
sorted out all works thank you
 
User avatar
greek
Member Candidate
Member Candidate
Posts: 111
Joined: Thu Nov 04, 2010 11:37 pm
Location: Russia, 78rus

Re: IKEv2 - Win10 Select Certificate Multiple VPN tunels

Fri Aug 02, 2019 1:30 am

Tell me please, how to do it for Win7 Pro ?

Who is online

Users browsing this forum: MSN [Bot] and 130 guests