Windows 10: Windows10 VPN using IPSEC/IKEv2 won't connect

I have set up a VPN server using IPSEC/IKEv2. Certificates are used for authentication, both for the server and a client.


VPN connection works great with a third party VPN client Greenbow but native Windows VPN client won't even try to connect.


Trying to open VPN connection Start -> VPN settings -> [select VPN] -> Connect results just a dialog "Verifying your sign-in info" which terminates with message "The context has expired and can no longer be used". Wireshark shows no traffic related to the connection excluding a DNS query.


Certificate chain and a user certificate are installed in 'Local Computer' certificate storage. I don't really understand which "sign-in info" is being verified. I have also tried to set up the connection with power shell, but that wouldn't help either:


Add-VpnConnection -Name "MyVPN" -ServerAddress "vpn.acme.com" -AuthenticationMethod "MachineCertificate" -EncryptionLevel "Required" -TunnelType "IKEv2"


System info:

OS Name Microsoft Windows 10 Pro

Version 10.0.18363 Build 18363



How to fix this? I would really like to use VPN client included in Windows10 if only it wasn't broken.


-Ismo

:)

 

Issues connecting to an IKEv2 VPN "The parameter is incorrect"

I've set up a VPN using StrongSwan software on a DigitalOcean server.
I used this guide here :How to Set Up an IKEv2 VPN Server with StrongSwan on Ubuntu 16.04 | DigitalOcean;

The server has no issues, the ufw rules, ipsec config and StrongSwan config are all followed exactly as the tutorial shows.

Whenever I click connect on Windows 10, via the control panel VPN section, it returns the message "Can't connec to VPN" "The parameter is incorrect".

The VPN is IKEv2

 

Adding IKEv2-based VPN connection through Group Policy

Hi everyone,

We've recently updated our VPN connection to IKEv2 and I'd like to update that through Group Policy so that it will be automatically configured for users on the domain. When I look at Group Policy, though, I don't see IKEv2 as an option. Under [User Configuration]
> [Preferences] > [Control Panel Settings] > [Network Options], when you create a new VPN connection, there are only the following choices under the [Networking] tab:

Type of VPN:

- Automatic

- PPTP VPN

- L2TP IPsec VPN

... but if you setup the connection manually, you can choose the IKEv2 connection type. Why don't I see it in Group Policy? Our Domain is at Windows 2008 R2 functionality level. Thanks for your help with this!

 

A problem of Windows 10 VPN (Ikev2) connection

I tried to use ikev2 VPN on my windows 10 laptop, and connected successfully (at least it showed "connected"). However, when I checked my IP on google, it suggested that it didn't connect me to the VPN server at all. And other methods also proved that my
laptop didn't get access to the Internet via ikev2 VPN.

So are there anyone who also meet the same problem? Is it a bug on windows 10, or just something I do is wrong?