Ikev2 Mobile Clients



  • We are using Pfsense just as a vpn concentrator with IKEV2 IPSEC and radius authentication for our users. We are using the native windows client. We now need to push out multiple phase 2 entries and it does not seem to be working (we are on 2.3.1) is there anything we need to do to make the addtional phase 2 entries work? it seems like only the first one does.


  • Rebel Alliance Developer Netgate

    That's all up to the client. They will either send all or send none. You can setup custom routing with powershell commands on the client side to nudge additional networks over, the server can't influence that.