Re: Simple, modern IKEv2 VPN using PSK and no certificates

See my following/second post if you encounter this problem! This post describes an issue which you will most likely get, when you don't configure your Clients correctly!

--------------------------------

Many thanks for your setup guide!

Is it possible that you post your vpn config? So like `show vpn`?

I'm encountering problems while connecting to the VPN.

My swanctl --log output:

10[NET] received packet: from <SMARTPHONE_IP>[500] to <EDGEROUTER_IP>[500] (848 bytes)
10[ENC] parsed ID_PROT request 0 [ SA V V V V V V V V V V V V V V ]
10[IKE] no IKE config found for <EDGEROUTER_IP>...<SMARTPHONE_IP>, sending NO_PROPOSAL_CHOSEN
10[ENC] generating INFORMATIONAL_V1 request 1892680096 [ N(NO_PROP) ]
10[NET] sending packet: from <EDGEROUTER_IP>[500] to <SMARTPHONE_IP>[500] (40 bytes)

When I run swanctl --load-conns I get the following result:

username@ubnt# sudo swanctl --load-conns
no files found matching '/etc/swanctl/swanctl.conf'
failed to open config file '/etc/swanctl/swanctl.conf'
no connections found, 0 unloaded
[edit

However running swanctl --list-conns, I get the following output:

username@ubnt# sudo swanctl --list-conns
roadwarrior: IKEv2
  local:  %any
  remote: %any
  local pre-shared key authentication:
    id: <MY_DYNDNS_DOMAIN>
  remote EAP authentication:
  roadwarrior: TUNNEL
    local:  0.0.0.0/0
    remote: dynamic
[edit]

So I would appreciate it, when someone could show me their vpn configuration :-)

My `show vpn` output:

username@ubnt# show vpn
 ipsec {
     include-ipsec-conf /config/user-data/my.ipsec
     include-ipsec-secrets /config/user-data/my.secrets
 }
[edit]

Kind regards

MrNobodyGER