Arch Linux

nekiiinkognito

Member

Registered: 2025-10-25

Posts: 9

Connect to IKEv2 VPN with crt file and login with password

Hello, I've been trying to connect to vpn via strongswan
Here is my config

connections {
    myvpn {
        version = 2
        encap = yes
        remote_addrs = 1.1.1.1
        proposals = aes256-sha256-modp2048
        local {
            auth = eap-mschapv2
            id = "my_login"
            eap_id = "my_login"
        }
        remote {
            certs = certificate.crt       # .crt in x509ca
            id = "vpn domain"
        }
        children {
            net {
                local_ts = 0.0.0.0/0
            }
        }
    }
}

secrets {
    eap-mschapv2 {
        id = "my_login"
        secret = "my_password"
    }
}
Then i run those commands
sudo systemctl restart strongswan
sudo swanctl --load-all
sudo swanctl --initiate --child net

And after that
[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
[NET] sending packet: from 192.168.0.8[500] to 1.1.1.1[500] (464 bytes)
[IKE] retransmit 1 of request with message ID 0
[NET] sending packet: from 192.168.0.8[500] to 1.1.1.1[500] (464 bytes)
[IKE] retransmit 2 of request with message ID 0
[NET] sending packet: from 192.168.0.8[500] to 1.1.1.1[500] (464 bytes)

If a replace 1.1.1.1 with vpn ip than this error occurs
initiate failed: establishing CHILD_SA 'net' failed

Can you help me, please?