Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IKEv2 clients receiving routes yet no connectivity

    Scheduled Pinned Locked Moved Routing and Multi WAN
    2 Posts 1 Posters 140 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      VioSpeed
      last edited by

      Hey guys,

      I've setup IKEv2 and clients are now able to successfully connect however they can't access anything on the remote network or out to the internet.

      I've added this command to Windows 10 clients:

      Set-VpnConnection -name "IKEv2" -SplitTunneling $False
      

      If I check the IPSEC logs I can see these routes show up there but how do I know if they are being passed to the mobile clients?

      The 10.x.x.0/22|/0 with some omitted numbers is our internal subnet on the remote network and the 172.16.10.1/32 IP is the mobile client's virtual address.

      I've tried both 0.0.0.0/0 route and the LAN subnet on the phase 2 config however neither work.

      https://imgur.com/a/bQmSmdV

      Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> config: 172.16.10.1/32|/0, received: ::/0|/0 => no match
      Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> config: 172.16.10.1/32|/0, received: 0.0.0.0/0|/0 => match: 172.16.10.1/32|/0
      Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> selecting traffic selectors for other:
      Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> config: 10.x.x.0/22|/0, received: ::/0|/0 => no match
      Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> config: 10.x.x.0/22|/0, received: 0.0.0.0/0|/0 => match: 10.x.x.0/22|/0
      Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> selecting traffic selectors for us:
      
      1 Reply Last reply Reply Quote 0
      • V
        VioSpeed
        last edited by VioSpeed

        Just needed to add the subnet im trying to reach to my Windows 10 VPN connection and it's now working:

        Add-VpnConnectionRoute -ConnectionName "VPN Name" -DestinationPrefix 10.xx.xx.0/22 -Passthru
        
        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.