Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 40 subscribers
  • Views 1654 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPSec MOBIKE IKEv2 extension disabling

Jaroslav Faldik

How can I disable MOBIKE IKEv2 extension support in IPSec?



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    Which version of XG firmware are you using?

    Which IPsec profile is showing the extension?

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    Hi,

    I'm using the latest version SFOS 20.0.1 MR-1-Build342.

    This extension does not show up in any IPSec profile, but I have reason to suspect that it is enabled by default in StrongSwan, because after connecting a new 5G/LTE modem with this extension enabled, after some time my IPSec connection with about 15 devices broke down and I had a lot of these entries in the log:

    "(unnamed) - Couldn't authenticate the remote gateway. Check the authentication settings on both devices. (Remote: xxx.xxx.xxx)",

    where "xxx.xxx.xxx" was just the WAN address of the new 5G/LTE modem. I suspect just the MOBIKE IKEv2.

Reply
  • 0 in reply to rfcat_vk

    Hi,

    I'm using the latest version SFOS 20.0.1 MR-1-Build342.

    This extension does not show up in any IPSec profile, but I have reason to suspect that it is enabled by default in StrongSwan, because after connecting a new 5G/LTE modem with this extension enabled, after some time my IPSec connection with about 15 devices broke down and I had a lot of these entries in the log:

    "(unnamed) - Couldn't authenticate the remote gateway. Check the authentication settings on both devices. (Remote: xxx.xxx.xxx)",

    where "xxx.xxx.xxx" was just the WAN address of the new 5G/LTE modem. I suspect just the MOBIKE IKEv2.

Children
Unfiltered HTML