Hello.
I am trying to connect to a IKEv2 VPN and my search lead to using StrongSwan
.
I can also see that there is a GUI option in Plasma 5:
I have installed it (strongswan) and the service seems to be up and running:
sudo systemctl status strongswan.service
● strongswan.service - strongSwan IPsec IKEv1/IKEv2 daemon using swanctl
Loaded: loaded (/usr/lib/systemd/system/strongswan.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2020-10-15 15:27:52 EEST; 19min ago
Process: 233110 ExecStartPost=/usr/bin/swanctl --load-all --noprompt (code=exited, status=0/SUCCESS)
Main PID: 233093 (charon-systemd)
Status: "charon-systemd running, strongSwan 5.9.0, Linux 5.8.11-1-MANJARO, x86_64"
Tasks: 17 (limit: 19096)
Memory: 4.4M
CGroup: /system.slice/strongswan.service
└─233093 /usr/bin/charon-systemd
okt 15 15:27:52 rebelCoderPC charon-systemd[233093]: dropped capabilities, running as uid 0, gid 0
okt 15 15:27:52 rebelCoderPC charon-systemd[233093]: spawning 16 worker threads
okt 15 15:27:52 rebelCoderPC charon-systemd[233093]: installed bypass policy for 192.168.1.0/24
okt 15 15:27:52 rebelCoderPC charon-systemd[233093]: installed bypass policy for ::1/128
okt 15 15:27:52 rebelCoderPC charon-systemd[233093]: installed bypass policy for fe80::/64
okt 15 15:27:52 rebelCoderPC swanctl[233110]: no files found matching '/etc/swanctl/conf.d/*.conf'
okt 15 15:27:52 rebelCoderPC swanctl[233110]: no authorities found, 0 unloaded
okt 15 15:27:52 rebelCoderPC swanctl[233110]: no pools found, 0 unloaded
okt 15 15:27:52 rebelCoderPC swanctl[233110]: no connections found, 0 unloaded
okt 15 15:27:52 rebelCoderPC systemd[1]: Started strongSwan IPsec IKEv1/IKEv2 daemon using swanctl.
[Info I have]:
- Gateway IP
- .key.pem file
- .cert.pem file
What else am I missing? How can I see why it is failing? Service output shows nothing.
I can’t connect to that VPN unfortunately. I am also confused why there are two certificate fields in the image above. One in the Gateway and one in Authentication section.
All solution I found so far were just a huge list of configuration instructions like this: Openswan L2TP/IPsec VPN client setup - ArchWiki
This is so error prone, and I am wondering if it should work in Manjaro via Plasma 5 Network Manager StrongSwan plugin?