Topics

1

18.7 Legacy Series / OpenVPN Client export with port/protocol change on server side.

« on: September 17, 2018, 10:56:12 am »

Hi,

After changing port and protocol for the OpenVPN server from 1194/UDP to 1195/TCP, client export configuration keeps using 1194/UDP. Also the generated filename still contain udp-1194.
I've checked that on client side the tunnel opens really with 1195/TCP.

Is this a known issue ?

Thanks,

Fred.

2

General Discussion / Road Warrior IPsec tunnel, with IkeV2 and EAP-MSCHAPV2

« on: August 06, 2018, 02:07:20 pm »

Hello,

I've created a RW IPsec configuration with IkeV2 and EAP-MSCHAPV2.
It works properly on specific cases, but I have anyway a configuration issue to deploy it easily when having more users to handle.

The issue is about EAP users and passwords. My understanding is I have to set this through "VPN/IPsec/Pre-Shared keys", and add specifically EAP users/passwords.
This is annoying because finally the user database ("System/Access/user") is not used (as set in "VPN/IPsec/Mobile Clients" page), and additionally I can't reuse the same user ID when adding the EAP password, I need to create a new ID.

I've tested the same with IkeV1 and xAuth, and it works well with the user database (no need to create additional passwords).

Could you tell me if my understanding is correct ?
If it is, I'm wondering if it would be possible to have EAP password handled directly from User configuration page (like it is done for "IPsec Pre-Shared Key") ?
If it is not, what is wrong ?

Thanks,

Fred.