IKEv2 clients receiving routes yet no connectivity
-
Hey guys,
I've setup IKEv2 and clients are now able to successfully connect however they can't access anything on the remote network or out to the internet.
I've added this command to Windows 10 clients:
Set-VpnConnection -name "IKEv2" -SplitTunneling $False
If I check the IPSEC logs I can see these routes show up there but how do I know if they are being passed to the mobile clients?
The 10.x.x.0/22|/0 with some omitted numbers is our internal subnet on the remote network and the 172.16.10.1/32 IP is the mobile client's virtual address.
I've tried both 0.0.0.0/0 route and the LAN subnet on the phase 2 config however neither work.
https://imgur.com/a/bQmSmdV
Feb 6 16:28:23 charon 12[CFG] <con-mobile|14> config: 172.16.10.1/32|/0, received: ::/0|/0 => no match Feb 6 16:28:23 charon 12[CFG] <con-mobile|14> config: 172.16.10.1/32|/0, received: 0.0.0.0/0|/0 => match: 172.16.10.1/32|/0 Feb 6 16:28:23 charon 12[CFG] <con-mobile|14> selecting traffic selectors for other: Feb 6 16:28:23 charon 12[CFG] <con-mobile|14> config: 10.x.x.0/22|/0, received: ::/0|/0 => no match Feb 6 16:28:23 charon 12[CFG] <con-mobile|14> config: 10.x.x.0/22|/0, received: 0.0.0.0/0|/0 => match: 10.x.x.0/22|/0 Feb 6 16:28:23 charon 12[CFG] <con-mobile|14> selecting traffic selectors for us:
-
Just needed to add the subnet im trying to reach to my Windows 10 VPN connection and it's now working:
Add-VpnConnectionRoute -ConnectionName "VPN Name" -DestinationPrefix 10.xx.xx.0/22 -Passthru
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.