StrongSwan: Difference between revisions

Completed article
m Making the VPN profile: Corrected spelling, tidied up
Line 160: Line 160:
* Click Create. Your new profile will then be created.
* Click Create. Your new profile will then be created.


Remember that the DNS name you type here '''MUST''' match the DNS name you specified eariler on the certificate under <code>CN</code> in the DN and the SAN.
You '''MUST''' use the same DNS name as you specified earlier on the certificate under <code>CN</code> in the DN and the SAN.


You '''MUST''' click the "Allow other people to use this connection" tick box so that it becomes a system wide connection and it can use the Machine Certificates.
You '''MUST''' click the "Allow other people to use this connection" tick box so that it becomes a system wide connection and it can use the Machine Certificates.
Line 169: Line 169:
* There will be a new connection created here with the name you gave it earlier. Right click on the connection and click Properties. You may need administrator credentials to change this.
* There will be a new connection created here with the name you gave it earlier. Right click on the connection and click Properties. You may need administrator credentials to change this.
* Click on the Security tab.
* Click on the Security tab.
* Under the "Type of VPN" dropdown menu, change the type to IKEv2. The options under "Authentication" should change. Click and select the Use machine certificates radio button. Then click OK.
* Under the "Type of VPN" drop-down menu, change the type to IKEv2. The options under "Authentication" should change. Click and select the Use machine certificates radio button. Then click OK.


The connection is now ready.
The connection is now ready.