Knowledge Base  >   VPN  > 

IKEv2 VPN from macOS to Vigor Router

This article demonstrates how to set up the Vigor router as a VPN gateway for Remote Dial-in IKEv2 VPN connections, especially from macOS. We will show the necessary configuration of the router and the IKEv2 VPN setup on macOS as well.

Setup on Vigor Router

1. Make sure the router is connected to the Internet and has a public WAN IP address so that VPN clients on the Internet can reach it.

2. Go to VPN and Remote Access >> IPsec General Setup, enter a Pre-Shared Key and Confirm. Then click OK to save. This step can be ignored if the VPN user will use a specific Pre-Shared Key configured in the VPN profile.

a screenshot of DrayOS IKE General Setup

3. Go to VPN and Remote Access >> Remote Dial-in User and click on an available index,

  • Check Enable this account
  • At Allowed Dial-In Type, check "IPsec Tunnel" and "IKEv1/IKEv2"
  • At Specify Remote Node, enter "macbook" as the Peer ID
  • At IKE Authentication Method, click "IKE Pre-Shared Key" button, then enter the Pre-Shared Key.
  • Click OK to save the profile.
screenshot of IKEv2 VPN user setup
Vigor Router Setup

1. Make sure the router is connected to the Internet and has a public WAN IP address so that VPN clients on the Internet can reach it.

2. Activate the IPsec VPN service.

Go to VPN > General Setup,

  • Switch on the Enabled tab.
  • Click Apply to Save the profile.

    • 3. Create a Teleworker VPN User Profile.

    Go to VPN > Teleworker VPN, click Add. Enter the Username, toggle Teleworker VPN and enter Password.

    In General Tab,

  • Status: Set to Active to enable the profile.
  • Group Policy: Select None if no specific group policy applies.
  • Expiration Time: Set the expiration time for the Telework VPN profile. Options include Never, after XX hours, or at a specified date and time.

    • In the Teleworker VPN tab,

  • Enter 0 (Seconds) for the Idle Timeout
  • Select the VPN Schedule
  • Under Allowed VPN Protocols, toggle IPsec, then select IKEv1/v2.
  • Under Security, enable Specify VPN Peer, then click IPsec Advanced Settings. Enter the Peer ID followed by the Pre-Shared Key.

    • The Peer ID setting allows different IKEv2 remote dial-in users to authenticate using different Pre-Shared Keys.

  • In Local IP Assignment, choose a LAN subnet for Assign IP from the LAN DHCP or configure a static IP for Static IP.
  • Click Apply to save the settings.

    • 1. Make sure the router is connected to the Internet and has a public WAN IP address so that VPN clients on the Internet can reach it.

    2. Go to VPN and Remote Access >> IPsec General Setup, type Pre-Shared Key. Then, click Apply to save.

    a screenshot of Linux IPsec General Setup

    3. Go to VPN and Remote Access >> VPN Profiles to add a profile as follows:

    • Check Enable
    • Select "Enable" for Remote Dial-in User
    • Type the LAN network you want the remote host to join at Local IP/Subnet Mask
    • Select "IKEv2" for IKE Protocol
    • Select "PSK" for Auth Type
    • Click Apply to save the profile
    a screenshot of Linux IKEv2 User Setup

    IKEv2 VPN Setup On macOS

    1. Go to System Preferences >> Network and click '+'
      1. Select VPN for Interface.
      2. Select IKEv2 for VPN Type.
      3. Give a Service Name and click Create.
    2. Type the WAN IP or hostname of the router at both Server Address, Remote ID and Local ID, then click Authentication Settings.
    3. In the pop-up window:
      1. Select "None" for Authentication Settings.
      2. Type the Pre-shared key configured in the VPN profile for Shared Secret.
      3. Click OK to save and close the window.
    4. Click Apply. Then, click Connect to establish the IKEv2 VPN to Vigor Router.

    Published On: Aug 08, 2017

    Share

    Was this helpful?   

    book icon

    Knowledge Base