VPN Clients Using Certificates - Revision history

Mohit: /* Using IKEv2 on Windows 10/11 */

2024-01-02T20:53:48Z

Using IKEv2 on Windows 10/11

← Older revision		Revision as of 20:53, 2 January 2024
Line 68:		Line 68:
	#The "Destination Name" field requires an arbitrary value that identifies what you are connecting too (IE put anything that identifies to you personally what you are connecting too)		#The "Destination Name" field requires an arbitrary value that identifies what you are connecting too (IE put anything that identifies to you personally what you are connecting too)
	##If you are unsure what to put in this field, use your Company's Name		##If you are unsure what to put in this field, use your Company's Name
	#~~Select "Don't connect now, just set it up so I can connect later"~~		#Leave all fields default and Click Create
	~~#Click Next=>~~Leave all ~~Fields Blank~~ and Click Create~~=>Click Close~~		#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Change adapter settings"
	#In the ~~lower-right corner of your screen by the clock, click the network icon~~		##Right click on the VPN connection you created in step 4 =>Goto Properties
	~~#The value you entered for "Destination Name" above will be listed here~~=>~~right click it~~=>~~Choose properties~~=>Select ~~the~~ "~~Security~~" ~~tab~~		##Under Security change type of VPN to "IKEV2", Data encryption to "Require Encryption" and Authentication to "Use Machine Certificates"
	##~~If you don't have a properties button, in the control panel under Network and Sharing Center,~~ on the ~~left side will be a "Manage Network Connections" link. In there, you will find your~~ VPN connection~~. Right-click that, choose properties, and select the "Security" tab.~~		#Your VPN connection is ready. Connect to VPN by going to the right bottom corner and click the network icon labeled "Destination Name" above and click "Connect"
	#~~Set "~~type of VPN" ~~to IKEv2~~
	~~#Click Advanced Settings=>ensure Mobility is checked and Network outage time is set to 30 minutes=>click OK~~
	~~#Set~~ Data ~~Encryption~~ to Require Encryption
	~~#Select the radio button for~~ "Use Machine Certificates"
	#~~Click OK~~

	==Using a Mac==		==Using a Mac==
	*Mac setups require the use of a mobile.config, please request assistance from us for help in getting this setup working.		*Mac setups require the use of a mobile.config, please request assistance from us for help in getting this setup working.

Mohit: /* Using IKEv2 on Windows 10 */

2024-01-02T20:44:59Z

Using IKEv2 on Windows 10

@@ Line 41: / Line 41: @@
 ##A Note on saving passwords: do not save the password unless you are the only one using this computer, instead enter it every time you connect
-==Using IKEv2 on Windows 10==
+==Using IKEv2 on Windows 7(Legacy)==
 #Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"

Bob: /* Using IKEv2 on Windows 10 */

2022-08-19T23:33:23Z

Using IKEv2 on Windows 10

← Older revision		Revision as of 23:33, 19 August 2022
Line 53:		Line 53:
	#In the lower-right corner of your screen by the clock, click the network icon		#In the lower-right corner of your screen by the clock, click the network icon
	#The value you entered for "Destination Name" above will be listed here=>right click it=>Choose properties=>Select the "Security" tab		#The value you entered for "Destination Name" above will be listed here=>right click it=>Choose properties=>Select the "Security" tab
			##If you don't have a properties button, in the control panel under Network and Sharing Center, on the left side will be a "Manage Network Connections" link. In there, you will find your VPN connection. Right-click that, choose properties, and select the "Security" tab.
	#Set "type of VPN" to IKEv2		#Set "type of VPN" to IKEv2
	#Click Advanced Settings=>ensure Mobility is checked and Network outage time is set to 30 minutes=>click OK		#Click Advanced Settings=>ensure Mobility is checked and Network outage time is set to 30 minutes=>click OK

Moses: /* Using IKEv2 on Windows 7/8/10 */

2020-05-11T19:02:08Z

Using IKEv2 on Windows 7/8/10

← Older revision		Revision as of 19:02, 11 May 2020
Line 41:		Line 41:
	##A Note on saving passwords: do not save the password unless you are the only one using this computer, instead enter it every time you connect		##A Note on saving passwords: do not save the password unless you are the only one using this computer, instead enter it every time you connect

	==Using IKEv2 on Windows ~~7/8/~~10==		==Using IKEv2 on Windows 10==

	#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"		#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"

Bob: /* Using a Mac */

2020-03-17T00:28:20Z

Using a Mac

← Older revision		Revision as of 00:28, 17 March 2020
Line 60:		Line 60:

	==Using a Mac==		==Using a Mac==
	*~~I would generally discourage trying to get certificates working on~~ a ~~Mac~~. ~~if it can be made to work~~, ~~it is certainly a dauntingly technical task that seems to get harder with every release of the Mac OS X operating system~~. ~~Value to cost ratio encourages you to use PSK instead~~		*Mac setups require the use of a mobile.config, please request assistance from us for help in getting this setup working.

Bob: /* Using IKEv2 on Windows 7/8/10 */

2018-11-08T19:33:21Z

Using IKEv2 on Windows 7/8/10

← Older revision		Revision as of 19:33, 8 November 2018
Line 55:		Line 55:
	#Set "type of VPN" to IKEv2		#Set "type of VPN" to IKEv2
	#Click Advanced Settings=>ensure Mobility is checked and Network outage time is set to 30 minutes=>click OK		#Click Advanced Settings=>ensure Mobility is checked and Network outage time is set to 30 minutes=>click OK
	#Set ~~Date~~ Encryption to Require Encryption		#Set Data Encryption to Require Encryption
	#Select the radio button for "Use Machine Certificates"		#Select the radio button for "Use Machine Certificates"
	#Click OK		#Click OK

Bob: /* Setup L2TP on Windows 7/8/10 */

2016-01-05T19:55:18Z

Setup L2TP on Windows 7/8/10

← Older revision		Revision as of 19:55, 5 January 2016
Line 35:		Line 35:
	#Click the button called "Advanced"=>Deselect "Verify the Name and Usage attributes for the server's certificate"=>Click OK		#Click the button called "Advanced"=>Deselect "Verify the Name and Usage attributes for the server's certificate"=>Click OK
	#Set "Data encryption" to "Optional encryption (connect even if no encryption)"		#Set "Data encryption" to "Optional encryption (connect even if no encryption)"
	#Under "Authentication", ensure "Allow these protocols" is selected=>Ensure "Unencrypted Password (PAP) is deselected=>Ensure "Challenge Handshake Authentication Protocol (CHAP)" is selected		#Under "Authentication", ensure "Allow these protocols" is selected=>Ensure "Unencrypted Password (PAP)" is deselected=>Ensure "Challenge Handshake Authentication Protocol (CHAP)" is selected
	##"Microsoft CHAP Version 2 (MSCHAP v2)" can be selected or deselected, but "Automatically use any Windows logon name and password" should not be selected		##"Microsoft CHAP Version 2 (MSCHAP v2)" can be selected or deselected, but "Automatically use any Windows logon name and password" should not be selected
	#Click OK		#Click OK

Bob: /* Setup L2TP on Windows 7/8/10 */

2016-01-05T19:54:55Z

Setup L2TP on Windows 7/8/10

← Older revision		Revision as of 19:54, 5 January 2016
Line 35:		Line 35:
	#Click the button called "Advanced"=>Deselect "Verify the Name and Usage attributes for the server's certificate"=>Click OK		#Click the button called "Advanced"=>Deselect "Verify the Name and Usage attributes for the server's certificate"=>Click OK
	#Set "Data encryption" to "Optional encryption (connect even if no encryption)"		#Set "Data encryption" to "Optional encryption (connect even if no encryption)"
	#Under "Authentication", ensure "Allow these protocols is selected=>Ensure "Unencrypted Password (PAP) is deselected=>Ensure "Challenge Handshake Authentication Protocol (CHAP)" is selected		#Under "Authentication", ensure "Allow these protocols" is selected=>Ensure "Unencrypted Password (PAP) is deselected=>Ensure "Challenge Handshake Authentication Protocol (CHAP)" is selected
	##"Microsoft CHAP Version 2 (MSCHAP v2)" can be selected or deselected, but "Automatically use any Windows logon name and password" should not be selected		##"Microsoft CHAP Version 2 (MSCHAP v2)" can be selected or deselected, but "Automatically use any Windows logon name and password" should not be selected
	#Click OK		#Click OK

Bob at 23:22, 26 November 2015

2015-11-26T23:22:39Z

← Older revision		Revision as of 23:22, 26 November 2015
Line 9:		Line 9:
	<b>NOTE:</b>Actions Listed in {Curly Braces} may not* be present, depending on the existing configuration of your computer		<b>NOTE:</b>Actions Listed in {Curly Braces} may not* be present, depending on the existing configuration of your computer

	==Installing the Certificate - Windows 7/8==		==Installing the Certificate - Windows 7/8/10==
	*<b>NOTE:</b> Not fully tested on Windows 8, please contact Computerisms if you are having trouble

	#Press Windows Key+R to open a run window=>Enter mmc in the only available field=>click OK		#Press Windows Key+R to open a run window=>Enter mmc in the only available field=>click OK
Line 21:		Line 20:
	#Close this window=>Select No when prompted to save		#Close this window=>Select No when prompted to save

	==Setup L2TP on Windows 7/8==		==Setup L2TP on Windows 7/8/10==
	*<b>NOTE:</b> ~~Adaptable to~~ windows 8, the settings are the same, but they aren't all in the same place		*<b>NOTE:</b> For windows 8/10, the settings are the same, but they aren't all in the same place. Please contact Computerisms for assistance.

	#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"		#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"
Line 42:		Line 41:
	##A Note on saving passwords: do not save the password unless you are the only one using this computer, instead enter it every time you connect		##A Note on saving passwords: do not save the password unless you are the only one using this computer, instead enter it every time you connect

	==Using IKEv2 on Windows 7/8==		==Using IKEv2 on Windows 7/8/10==
	*<b>NOTE:</b> Untested on Windows 8, but should work more or less the same

	#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"		#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"

Bob at 07:02, 29 July 2015

2015-07-29T07:02:12Z

← Older revision		Revision as of 07:02, 29 July 2015
Line 1:		Line 1:
	BEFORE YOU BEGIN: you need the following items:<br>		BEFORE YOU BEGIN: you need the following items:<br>
	*A P12 Certificate with a password		*A P12 Certificate with a password
			*If your company firewall uses L2TP or IKEv2
	*The Hostname or IP Address of your company firewall		*The Hostname or IP Address of your company firewall
	**Note: if using IKEv2 you will be required to know and use the DNS name of your company firewall		**Note: if using IKEv2 you will be required to know and use the DNS name of your company firewall