IPsec: Setup Linux Remote Access

Index

• IPsec: Setup Linux Remote Access

  • Step 1 - Download Certificate

  • Step 2 - Add VPN Connection

  • IKEv2 + EAP-MSCHAPv2 or EAP-RADIUS

Here you can see the configuration options for all compatible VPN types. We assume that you are familiar with adding a new VPN connection.

The tests were done with Ubuntu 18.04 and network-manager-stronswan installed, Ubuntu only supports OpenVPN and PPTP with the default install.

It can be installed using the following command on the command line:

apt install network-manager-strongswan

Step 1 - Download Certificate

Download the Root CA from the OPNsense Firewall since it is needed for all EAP types with IKEv2.

Step 2 - Add VPN Connection

Open the network manager and add a new VPN connction. Choose IPSec/IKEv2, enter a Name and set the Address to the FQDN matching the one of the certificate at your Firewall.

IKEv2 + EAP-MSCHAPv2 or EAP-RADIUS