Setting up an IKEv2 Client VPN

Follow

Scope

This article explains how to set up a client VPN on your DNA.

Steps

  1. Log in to the DNA and choose the Security tab.

  2. Choose the Client VPN tab from the left pane and download the VPN gateway certificate to the desired machine.

    vpn_gateway_cert.jpg

  3. With the certificate downloaded, open Microsoft Management Console (search for or run "mmc.exe").

  4. In the Console dialog box, select File > Add or Remove Snap-in.

  5. From the Available snap-ins list, select "Certificates," then click Add. In the resulting window, select "Computer Account" and click Next. Then select "Local Computer" and click Finish. Finally, click OK to close the Add or Remove Snap-ins dialog.

    add_remove_snapins.jpg

  6. Back in the Console1 dialog, expand the Certificates category and select Trusted Root Certification Authorities > Certificates. Choose Action in the menu bar > All tasks > Import. From here, click next on the Welcome screen. 

    Cert.PNG

    Action.PNG

    IKEv2.KB1.PNG

  7. Click browse and make sure the drop down for file type is set to All Files shown at the bottom right. Then choose the Certificate you saved earlier from Step 2 and click open. Click Next and then Finished.

    IKEv2.KB2.png

  8. Click the Windows start button and type "network".  From the list of options, choose Network and Sharing Center. Select Set Up a new Connection or Network > Connect to a Workplace > Use my Internet Connection (VPN) and enter the Assigned Public Address of the DNA which you can find on the Network Overview tab of the DNA under Router Details.

    IKEv2.KB3.PNG

    router_deets.jpg

    IKEv2.KB4.PNG

  9. Back on the "Network and Sharing Center" Click Change Adapter Settings, right click on the VPN Connection and click "properties".

    IKEv2.KB5.PNG

  10. From the connection's Properties window, choose the Security tab and choose "IKEv2" for the Type of VPN. For Authentication, choose Microsoft: Secured Password (EAP-MSCHAP v2) (encryption enabled) and then click the Networking tab, select IPv4 -> click Properties -> select Advanced and verify that "Use default gateway" is checked. Click OK to and exit all dialogue boxes. You should now be able to connect to the VPN. 

    properties.jpg

    vpn_connect.jpg

  11. When you choose connect for the first time, it will prompt you for login credentials which you should have set from the DNA client VPN page.

Was this article helpful?

0 out of 0 found this helpful

You must sign in before voting on this article.

Want to talk about it? Head on over to our Community Forum!