IKEv2 clients receiving routes yet no connectivity



  • Hey guys,

    I've setup IKEv2 and clients are now able to successfully connect however they can't access anything on the remote network or out to the internet.

    I've added this command to Windows 10 clients:

    Set-VpnConnection -name "IKEv2" -SplitTunneling $False
    

    If I check the IPSEC logs I can see these routes show up there but how do I know if they are being passed to the mobile clients?

    The 10.x.x.0/22|/0 with some omitted numbers is our internal subnet on the remote network and the 172.16.10.1/32 IP is the mobile client's virtual address.

    I've tried both 0.0.0.0/0 route and the LAN subnet on the phase 2 config however neither work.

    https://imgur.com/a/bQmSmdV

    Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> config: 172.16.10.1/32|/0, received: ::/0|/0 => no match
    Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> config: 172.16.10.1/32|/0, received: 0.0.0.0/0|/0 => match: 172.16.10.1/32|/0
    Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> selecting traffic selectors for other:
    Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> config: 10.x.x.0/22|/0, received: ::/0|/0 => no match
    Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> config: 10.x.x.0/22|/0, received: 0.0.0.0/0|/0 => match: 10.x.x.0/22|/0
    Feb 6 16:28:23	charon		12[CFG] <con-mobile|14> selecting traffic selectors for us:
    


  • Just needed to add the subnet im trying to reach to my Windows 10 VPN connection and it's now working:

    Add-VpnConnectionRoute -ConnectionName "VPN Name" -DestinationPrefix 10.xx.xx.0/22 -Passthru
    

Log in to reply