Roadwarrier-Setup IKEv2, mutual certificate authentication and provisioning with Apple Configurator
-
I want to implement an IKEv2 roadwarrior setup with Mutual Certificate authentication to access my home network from iOS and Mac OS devices.
I would do the following:
Create a letsencrypt server certificate for the server side with the name as configured in DNS.
On the pfSense I also have a CA. I create one client certificate for each of my clients and sign these using my own CA.
When connecting the client presents a client certificate which pfSense can validate against its own CA while the server presents a certificate which the client can validate using a letencrypt root certificate.
Should this work - generally speaking?
Has anyone around here ever successfully provisioned an IKEv2 profile to an iOS device with Apple Configurator? This tool is mentioned several times in the documentation however there is no step by step walkthrough for my intended setup.
